I want to update a user for disabled his account.
But this action doesn't work, it returns me "Forbbiden" and I'm full admin
{"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation."}
Thanks!
Hey Ellis,
The user account running the flow and the connection has Privileged Authentication Administrator, Privileged Role Administrator, and User Administrator.
The account I am trying to disable has Azure AD Joined Device Local Administrator and Intune Administrator.
Continues to fail due to "Insufficient privileges to complete the operation".
I was able to work around this by using an app registration and an HTTP API patch action.
Azure AD built-in roles - Microsoft Entra | Microsoft Learn
Ellis
____________________________________
If I have answered your question, please mark the post as ☑️ Solved.
If you like my response, please give it a Thumbs Up.
My Blog Site
Hello,
I am having this problem with an account that has User administrator permissions, I also tried with an account that has global administrator permissions. The account I am trying to disable has an administrator role.
After removing the Azure AD admin role from the account I am trying to disable, the issue immediately goes away. I tried creating a new connection. I also tried to remove the role first before disabling it with a separate action but I get a 403 forbidden error there as well.
Is disabling (accountEnabled = no) on Admin users with Update User in Power Automate not supported? Is there a workaround? I am trying to use Power Automate to automate disabling of accounts that are not used/renewed after a period of time.
Hi @freddo ,
Here is the output of the flow running again, with an admin role and as a standard user with no admin roles:
Please post an extract of the flow and error message you are getting. Please also try with a new connection:
Ellis
not working for me. Tested with Global admin (& user adminstrator)
This definitely looks like a permission issue. When you say you are full admin, is that Global Admin?
I think you need at least the User Administrator role:
Ellis
____________________________________
If I have answered your question, please mark the post as Solved.
If you like my response, please give it a Thumbs Up.
Michael E. Gernaey
497
Super User 2025 Season 2
David_MA
436
Super User 2025 Season 2
Riyaz_riz11
244
Super User 2025 Season 2