Add AD User to Project via CALM

I am looking at a way to programmaticly add a Directory User to a Project, as part of a blueprint.  Blueprint has a macro for the user identity in question.  I just need to be able to set that user as a Project User, and ultimately VM Owner.  I have the VM Owner, but they need to be a prior Project User, and adding domain users, to project users, sounds like a bad idea.