Disable AD account

(0) Share

Report

Posted on by Rifton007

I want to update a user for disabled his account.

But this action doesn't work, it returns me "Forbbiden" and I'm full admin

{"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation."}

Thanks!

Categories:

General topics

I have the same question (0)

All responses (6)

Answers (1)

Verified answer

Ellis Karim 11,681 Super User 2025 Season 2 on at

Like (2)

Report

This definitely looks like a permission issue. When you say you are full admin, is that Global Admin?
I think you need at least the User Administrator role:

Ellis

____________________________________
If I have answered your question, please mark the post as Solved.
If you like my response, please give it a Thumbs Up.

Was this reply helpful? Yes No
freddo 15 on at

Like (0)

Report

not working for me. Tested with Global admin (& user adminstrator)

Was this reply helpful? Yes No
Ellis Karim 11,681 Super User 2025 Season 2 on at

Like (0)

Report

Hi @freddo ,

Here is the output of the flow running again, with an admin role and as a standard user with no admin roles:

Please post an extract of the flow and error message you are getting. Please also try with a new connection:

Ellis

Was this reply helpful? Yes No
jordanmastel 28 on at

Like (0)

Report

Hello,

I am having this problem with an account that has User administrator permissions, I also tried with an account that has global administrator permissions. The account I am trying to disable has an administrator role.

After removing the Azure AD admin role from the account I am trying to disable, the issue immediately goes away. I tried creating a new connection. I also tried to remove the role first before disabling it with a separate action but I get a 403 forbidden error there as well.

Is disabling (accountEnabled = no) on Admin users with Update User in Power Automate not supported? Is there a workaround? I am trying to use Power Automate to automate disabling of accounts that are not used/renewed after a period of time.

Was this reply helpful? Yes No
Ellis Karim 11,681 Super User 2025 Season 2 on at

Like (0)

Report

User Administrator allows you to disable or enable SOME user accounts. As far as I know, you can't disable accounts that have the Global Administrator role if the account you are using only has the User Administrator role:

Azure AD built-in roles - Microsoft Entra | Microsoft Learn

Ellis
____________________________________
If I have answered your question, please mark the post as ☑️ Solved.
If you like my response, please give it a Thumbs Up.
My Blog Site

Was this reply helpful? Yes No
jordanmastel 28 on at

Like (1)

Report

Hey Ellis,

The user account running the flow and the connection has Privileged Authentication Administrator, Privileged Role Administrator, and User Administrator.

The account I am trying to disable has Azure AD Joined Device Local Administrator and Intune Administrator.

Continues to fail due to "Insufficient privileges to complete the operation".

I was able to work around this by using an app registration and an HTTP API patch action.

Was this reply helpful? Yes No