Create the Catalog Item
Now the rest action is ready to be integrated into the flow but now we create the Catalog Item so we can provide self service to users and we can pass the user selected variables via the rest action to the Azure DevOps pipelines. To keep things simple create a catalog item with 2 inputs which will be username and security group

The username field:
Since users making the requests don’t know the proper format to query active directory you can create a lookup select box so the user can select from FirstName LastName while we can have the proper value to pass to the rest call and our scripts. If you have a mix of names you can filter them with the reference qualifier, in the example below the ref qualifier will only provide usernames that end in domain.local and this will omit local accounts from being displayed.

The security group field:
Like the username, the security group can be displayed to the user in a different way than the actual value we need for the REST step and script. In the example below we provide the user with a choice selection and they see the Pretty Looking Name while we capture the Actual_ad_SecurityGroup_name as the value to pass to our script via REST so that we can query and modify the right Active Directory Object.

The Catalog Item:
In this example we are making things simple by providing 2 select fields so that the requester can pick the group and user to add.
