You’re offline. This is a read only version of the page.
16
Team, Need your help on using the Azure AD connector and the appropriate permissions to assign both at a connector level in my team's dedicated DLP policy and also in Azure AD.
The user case is to retrieve specific information (employee id) from the user's profile from a Power Automate Flow. Questions
* When enabling the connector in my team's DLP policy, can we only enable the "Get User" action and disable all other actions such as "Update user", "Create user" and so on.
* And what minimum permissions need to be granted in Azure AD to use the "Get User" action.
Thanks in advance!
Regards,
Preddy
@v-chengfen-msft Just another quick follow up question. Is Directory.Read.All still required if the requirement is to only read specific user's profiles? Thanks!
Thank you @v-chengfen-msft You made my day!
Greatly appreciate your inputs. This was exactly what I was looking for.
Thanks again!
Regards,
Preddy
Hi @Preddy ,
To answer your questions:
Yes, you can enable only the "Get User" action and disable all other actions in your team's DLP policy. To do this, follow these steps:
To use the "Get User" action in Power Automate, you need to have the following minimum permissions in Azure AD:
You can grant these permissions by following these steps:
Once you have granted these permissions, you can use the "Get User" action in your Power Automate flow to retrieve the employee ID from a user's profile.
I hope this helps! Let me know if you have any further questions.
Best Regards
Cheng Feng
#1
Michael E. Gernaey
497
Super User 2025 Season 1
#2
David_MA
436
Super User 2025 Season 1
#3
Riyaz_riz11
244
Super User 2025 Season 1
Share
Report
All responses (
Answers (
