"Insufficient privileges to complete the operation" when updating general user Account Enabled in Azure AD even though I'm a global admin

(1) Share

Report

Posted on by InTasmania

Using the action Azure AD Update user. Trying to set Account Enabled property to False (No). I get the error

"code": "Authorization_RequestDenied",

"message": "Insufficient privileges to complete the operation.",

The user I am trying to update is a standard user with no admin privileges. I am a global administrator and I even had a colleague add Helpdesk Administrator and User Administrator privileges to my role in case that was the cause.

2024-05-08 16_23_19-User Details Panel - Microsoft 365 admin center and 54 more pages - Personal - M.png

2024-05-08 16_24_42-Run History _ Power Automate and 54 more pages - Personal - Microsoft Edge.png

I have checked the connection I am using is for my user, I even created a new connection as a test but it is still failing. I did a test and can update other fields fine, it's just the Account Enabled property that is failing. The trigger for the flow is Manually trigger a flow.

Does anyone have any ideas of what could be going wrong?

Categories:

Building flows

I have the same question (0)

All responses (5)

Answers (0)

ManishSolanki 15,091 Super User 2025 Season 2 on at

Like (0)

Report

Hi @InTasmania

Please verify if you have necessary privileges to update account in Azure AD or Entra ID. It looks like it is missing.

If this helps & solves your problem, please remember to give a 👍 and accept my solution as it will help others in the future.

Was this reply helpful? Yes No
InTasmania 35 on at

Like (0)

Report

@ManishSolanki can you please advise where in Entra ID or Azure AD I need to adjust privileges? The screenshot I provided is from my profile in the M365 admin users console:
This is my assigned roles in the Entra ID:
From both those it appears that I am a global administrator. I would have thought that was enough privilege but just in case I had a colleague add User Administrator and Help Desk Administrator to my role. Those screenshots seem to show that I do have those roles assigned. Does anyone know what other roles I need to add? Or where else I need to adjust permissions?

Was this reply helpful? Yes No
ManishSolanki 15,091 Super User 2025 Season 2 on at

Like (0)

Report

Hi @InTasmania

You have mentioned that it is a manual trigger flow, so are you triggering the flow or have shared it to other users? In latter case, you need to set the static connection for "Update user" action that requires higher privileges. Here are the steps to set the static connection:

Go to flow details screen, edit 'Run only users' setting on the bottom right corner:

Locate the 'Microsoft Entra ID' connection and select your connection from the drop down:

Click 'Save' button to save the changes.

If this helps & solves your problem, please remember to give a 👍 and accept my solution as it will help others in the future.

Was this reply helpful? Yes No
InTasmania 35 on at

Like (0)

Report

Hi @ManishSolanki no, it is just me running it. I have not shared it with anyone.

Was this reply helpful? Yes No
InTasmania 35 on at

Like (0)

Report

Is the case then that this operation is not possible with this action? Even though it is available in the action? Has anyone had this working in their organisation?
I would raise a ticket with M$, and I find this incredibly frustrating, we spend $,000s with M$ each year and they want to charge us for support of their product that doesn't work?

Was this reply helpful? Yes No