Power Platform Community Forum Thread Details

Hey everyone!

I'm trying to build a Power Automate flow that actively monitors for disabled Azure AD users and automatically revokes their active sessions through Microsoft Graph (for example, using revokeSignInSessions).

I’m struggling to find the best trigger for this scenario — ideally something that fires in real time when a user is disabled, rather than relying on a scheduled recurrence.

Has anyone implemented something like this or found a reliable approach (maybe via Entra ID logs, Graph webhooks, or another connector)?

Any suggestions would be greatly appreciated!

Categories:

AI Builder

I don’t think this can be triggered directly from Power Automate, but you can automate it using Azure.

Two possible approaches:

Enable Entra ID audit/event logs and route them to an Azure Function or Logic App
When a user is disabled, Entra ID writes an “Update user” audit log where accountEnabled changes to false.
You can stream these logs to Event Hub or Log Analytics and trigger an Azure Function/Logic App from there.

Use Microsoft Graph change notifications (subscriptions)[not sure if we have for user modifications]
You can subscribe to user updates via Graph API and receive a webhook whenever a user is modified.
In your webhook logic, check if accountEnabled became false and trigger your automation.