Unanswered

Office 365 group - remove disabled users

(0) Share

Report

Posted on by Michal Z.

147

With the current set of connectors, I am able to build a flow that can list groups where I am the owner, list their members, and remove disabled user accounts from the group. If you would like to see such a flow, let me know.

But, what I am missing is to list all Office 365 groups in the tenant and do the same as above using a service account with a "Groups administrator" role assigned in AzureAD.

I have looked at LogicApp but the set of connectors for this purpose is quite similar.

Can you give me a tip on how to list all Office 365 groups without being an owner of those?

Thx in advance

Mike

Categories:

Building flows

I have the same question (0)

All responses (8)

Answers (0)

Ellis Karim 11,653 Super User 2025 Season 2 on at

Like (0)

Report
Re: Office 365 group - remove disabled users

I've been able to follow the blog post below and list all AAD Groups:
Using Flow with Graph API https://www.lee-ford.co.uk/using-flow-with-graph-api/
Microsoft Graph provides an API you can use to list all groups: Graph Explorer - Microsoft Graph
I managed to create a demo flow, based on a previous template I had, that lists all groups in my organisation:

The API can only return a maximum of 999 items. There may be a way to get more results, but my AAD has less than 999 groups. See: Handling Pagination with the MS Graph API in Logic Apps and Power Automate
if you need to get more than 999 items - but this is not something I have yet had to implement.

I'm using Azure Key Vault to keep API keys and other secrets secure. For testing you will need to paste in the secret for the HTTP action.

The TenantID
https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Overview

Client ID (Application ID):

Hope this helps.

Ellis
____________________________________
If I have answered your question, please mark the post as Solved.
If you like my response, please give it a Thumbs Up.

Was this reply helpful? Yes No
Michal Z. 147 on at

Like (0)

Report

Re: Office 365 group - remove disabled users

Thank you @ekarim2020 for a very detailed response.
This looks like a way to go.
I can see that using Graph API I can list groups (https://graph.microsoft.com/v1.0/groups?$filter/groupTypes eq 'unified'), list their owners and members, and even remove members.
This way all I need from PowerAutomate or Logic App is to check if the user/member is enabled or not using Get user profile (V2) from Office 365 Users connector. And even the last part can be replaced with Graph API.

Was this reply helpful? Yes No
Ellis Karim 11,653 Super User 2025 Season 2 on at

Like (1)

Report

Re: Office 365 group - remove disabled users

I prefer to use the available connectors and actions where possible. If these can't do what I need or it's going to be a lot more work and complexity that can be avoided, I'll look at using Graph API calls.

There is also the following Office 365 Groups action:
This returns a maximum of 100 items. Using a graph API call with HTTP action has so far provided what I need.

Ellis

Was this reply helpful? Yes No
metrognome 59 on at

Like (0)

Report

Re: Office 365 group - remove disabled users

I am actually on the lookout for a flow that will run a check on the members' mailtips and highlight those that are disabled for me ot remove/delete.
IF you have anything like this, would be interested to read.

Was this reply helpful? Yes No
Ellis Karim 11,653 Super User 2025 Season 2 on at

Like (0)

Report

Re: Office 365 group - remove disabled users

Sorry, I didn't understand sentence about mailtips:
@metrognome wrote:
I am actually on the lookout for a flow that will run a check on the members' mailtips and highlight those that are disabled for me ot remove/delete.
IF you have anything like this, would be interested to read.
Ellis

Was this reply helpful? Yes No
Ellis Karim 11,653 Super User 2025 Season 2 on at

Like (0)

Report

Re: Office 365 group - remove disabled users

Sorry, I didn't understand sentence about mailtips:
@metrognome wrote:
I am actually on the lookout for a flow that will run a check on the members' mailtips and highlight those that are disabled for me ot remove/delete.
IF you have anything like this, would be interested to read.
Ellis

Was this reply helpful? Yes No
metrognome 59 on at

Like (1)

Report

Re: Office 365 group - remove disabled users

Mailtips is basically one option of the Outlook/O365 connector and basically mailtip returns either the out of office of a user or a warning that the mailbox is no longer operational (discontinued, deleted or full).
It is a "quick and dirty" shortcut to check for an accounts's status and (especially in flows) bypass people when their out of office is active.

Was this reply helpful? Yes No
Ellis Karim 11,653 Super User 2025 Season 2 on at

Like (1)

Report

Re: Office 365 group - remove disabled users

See if the following post helps:
Determine users out of office status based on mailtips - Automatic Replies on or not
https://powerusers.microsoft.com/t5/Building-Flows/Determine-users-out-of-office-status-based-on-mailtips-Automatic/m-p/599256/highlight/true#M79112

And the following extract from a flow:

Also, the Search for users can return the account enabled status for each account:
Ellis

Was this reply helpful? Yes No