Hi All,

Greetings for the day 🙂 LIFE IS BEAUTIFUL 🙂 I hope we all are safe 🙂  STAY SAFE, STAY HEALTHY 🙂

For couple of articles we will discuss – How to automate guest user management through Power Automate and Microsoft Graph API rest service

In this article we will discuss how to add guest user to Azure AD

Background / Use Case

• We need to add guest user to Azure AD when Power Apps form is submitted. This is basically we can do from the portal as well but since we need to delegate this task to the users to whom we don’t want to give access to Azure AD and so the requirement 🙂
• We are reading guest user details like – Email Address, Display Name (First Name or Last Name)

Take Away from this article:

• Power App form for reading guest user details – Email Address, Display Name
• Power Automate to add respective guest user to Azure AD if user is not already exists
• Microsoft Graph REST API for adding guest user to Azure AD
• How to use HTTP connector
• Calling REST API using HTTP connector from Power Automate

Details:

Power App Form :

• Above is the simple Power App form which reads the guest user details – Basically in Power Automate we need => Guest user Email and Display Name
• On “Save” button click we trigger the Power Automate, which add the guest user to the Azure AD if already not exists
• Following is the formula on “Save” button “OnSelect” action

'PowerApp->GuestUserEmail'.Run(txtEmail.Text,txtFirstName.Text,txtLastName.Text)

Power Automate :

• Power Automate is also very simple. Accepts three parameters and trigger HTTP request to add respective guest user to Azure AD
• Complete Power Automate snap :

HTTP connector :

• HTTP connector is available with premium license
• Once we have added HTTP connector we need to provide following required details :
  • Method = > POST, GET, DELETE, PUT, PATCH
  • URI => REST call which we need to invoke => here in our case to add guest user in Azure AD => https://graph.microsoft.com/v1.0/invitations
  • Authentication mechanism => None, BASIC, Client Certificate, Raw, Active Directory OAuth
• Since we are calling Microsoft Graph Rest API, we are using Active Directory OAuth
• For using Microsoft Graph Rest API and Active Directory OAuth authentication we need to provide following details
  • Tenant => Our tenant id
  • Audience => Our Microsoft Graph URL => https://graph.microsoft.com
  • Client Id => Our custom Azure App ID
  • Credential Type => Either client secret key or certificate
  • Secret => Secret key for our Azure Client App

Next Article : In next article we will discuss how to add external / guest user to specific Group

We have very good series Microsoft Graph please have a look – https://knowledge-junction.in/?s=Microsoft+Graph

We have very good series on Power Automate – https://knowledge-junction.in/?s=power+automate OR https://knowledge-junction.in/?s=power+platform

We have very good in depth series on Azure App and Azure Active Directory – https://knowledge-junction.in/?s=Azure+App OR https://knowledge-junction.in/?s=Azure+Active+Directory

Thanks for reading 🙂 If its worth at least reading once, kindly please like and share. SHARING IS CARING 🙂

Share In Teams:

Enjoy the beautiful life 🙂 Have a FUN 🙂 HAVE A SAFE LIFE 🙂 TAKE CARE 🙂