Hello,
This command was working fine and it stopped recently. Not related to ACL, since I can add user using a console.
Add-QADGroupMember -Identity "na\DSS-RO" -Member "xyz"
Name Type DN
---- ---- --
Alex Iserlis user CN=xyz,OU=Users,OU=FD,DC=na,DC=xyz,DC=com
Add-QADGroupMember : Access is denied.
At line:1 char:1
+ Add-QADGroupMember -Identity "na\DSS-RO" -Member "xyz"
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Add-QADGroupMember], UnauthorizedAccessException
+ FullyQualifiedErrorId : System.UnauthorizedAccessException,ActiveRoles.ManagementShell.Commands.AddGroupMemberCmdlet2