Automate User Offboarding in Microsoft 365 | Full Tutorial

[@themevrouwdewi]

Subscribed to you while I was looking into something at the office today. Looks like you’re making a lot of videos that are specific enough to my situations, where other videos are more general. I’ll check your channel out soon enough.

[@krampuswinter5917]

Thank you so much for this content. This tutorial is great to meet compliance with Nist-800-171 Control 3.9.2 "Ensure that organizational systems containing CUI are protected during and after personnel actions such as terminations and transfers.". It also indirectly supports other controls for CMMC.

[@sadkingbilly3308]

This is gold. Can you elaborate as to why it’s necessary to run in 5.1?

[@strancho2003]

Hey, Nick! Very helpfull tutorial. I was wondering how are you managing users OneDrive decommission. Do you grand anathor user rights over their OneDrive or export it somewhere? I have created a Team called Offboarded Users OneDrive and create shared channels in it with the name of the user we are terminating, and then generate link to the OneDrive and move its content to the channel. Could it be automated this as well?

[@themevrouwdewi]

I like how specific your question is. I haven’t had to do this yet myself because generally orgs don’t ask us for OneDrive access after a termination. I did have to share the rights to someone’s OneDrive this week though. Learned a lot about the SharePoint admin center and that I actually had to use PowerShell to grant rights. Then I took away the license but as it turns out that also takes away the ability to view the recycle bin. Interesting stuff.

[@jameseduard2092]

can we migrate this into logic apps?

[@MikeHatheway]

Great content! Is there a reason that a premium Power Automate flow works better than a Azure Logic App, since you are already using Azure objects like runbooks?

[@kenellem.6233]

Hi, is it possible to automate Windows AutoPilot reset with a trigger set off from a log off event?

[@KRedsTV]

Hi - Hope you are okay! I understand this disables a user, but can you do a video or show how the user can then be deleted using HTTP/Graphs through power automate? That would be extremely helpful! Thank you

[@mtamitolanga]

impressive....

[@nyx574]

Im getting Action 'Block_Sign_in' failed: Insufficient privileges to complete the operation. Odd thing is I'm testing with a global admin account...

[@nelgonz3143]

You might have a dynamic group that can't be removed. I was having a similiar issue, but we had a dynamic group called "All Users". I removed that dynamic group because it was simply applied to all users and I did not see a use for it.