Symptoms

How to add Azure Active Directory (AAD) users under server rights
 

Diagnoses

When trying to add an AAD user in K2 workspace under Server Rights, You select the Security Label AAD but when trying to search for these users you get an exception

"Exception has been thrown by the target of an invocation. OAuth token requires authorization." Screenshot attached.

What is the reason for this error?
 

Resolution

As per KB http://help.k2.com/kb001636, you will need to create a service instance to allow K2 to authenticate against AAD via workspace. After this you should be able to create the smart objects and execute a get list method for all 3 of them to see if this brings back the users successfully.

Going back to workspace you should be able to select the users as you wish under the AAD security label.