Home > Appendices > Appendix C - Assignable Permissions > Microsoft 365 Permissions > Microsoft 365 Workflow Permissions
Export to PDFMicrosoft 365 Workflow Permissions
| Workflow type | Manageable object type | Available trigger event | Available workflow action |
|---|---|---|---|
| Dynamic workflow (triggered by trigger events) | Users | Create/Invite user | Assign licenses |
| Dynamic workflow (triggered by trigger events) | Users | Create/Invite user | Add to the Group |
| Dynamic workflow (triggered by trigger events) | Users | Create/Invite user | Add to the Team |
| Dynamic workflow (triggered by trigger events) | Users | Create/Invite user | Share user calendar |
| Dynamic workflow (triggered by trigger events) | Users | Create/Invite user | Send email to manager or specified users |
| Dynamic workflow (triggered by trigger events) | Users | Create/Invite user | Pre-provision OneDrive |
| Dynamic workflow (triggered by trigger events) | Users | Create/Invite user | Manage mailbox archive |
| Dynamic workflow (triggered by trigger events) | Users | Create/Invite user | Manage litigation hold |
| Dynamic workflow (triggered by trigger events) | Users | Create/Invite user | Manage email apps settings |
| Dynamic workflow (triggered by trigger events) | Users | Create/Invite user | Manage language and time |
| Dynamic workflow (triggered by trigger events) | Users | Create/Invite user | Set working hour time zone |
| Dynamic workflow (triggered by trigger events) | Users | Create/Invite user | Configure MFA settings |
| Dynamic workflow (triggered by trigger events) | Users | Create/Invite user | Assign roles |
| Dynamic workflow (triggered by trigger events) | Users | Create/Invite user | Assign to administrative units |
| Dynamic workflow (triggered by trigger events) | Users | Delete user | Send email to manager or others |
| Dynamic workflow (triggered by trigger events) | Users | Delete user | Reassign user’s Group ownership to others |
| Dynamic workflow (triggered by trigger events) | Users | Delete user | Reassign user’s Team ownership to others |
| Dynamic workflow (triggered by trigger events) | Users | Delete user | Reassign user’s OneDrive administrator permission to others |
| Dynamic workflow (triggered by trigger events) | Users | Block user | Assign others as user’s OneDrive administrator |
| Dynamic workflow (triggered by trigger events) | Users | Block user | Reassign user’s Group ownership to others |
| Dynamic workflow (triggered by trigger events) | Users | Block user | Reassign user’s Team ownership to others |
| Dynamic workflow (triggered by trigger events) | Users | Block user | Remove licenses |
| Dynamic workflow (triggered by trigger events) | Users | Block user | Remove from the Group |
| Dynamic workflow (triggered by trigger events) | Users | Block user | Remove from the Team |
| Dynamic workflow (triggered by trigger events) | Users | Block user | Archive mailbox |
| Dynamic workflow (triggered by trigger events) | Users | Block user | Convert user mailbox to shared |
| Dynamic workflow (triggered by trigger events) | Users | Block user | Configure mailbox automatic replies |
| Dynamic workflow (triggered by trigger events) | Users | Block user | Configure mailbox delegation |
| Dynamic workflow (triggered by trigger events) | Users | Block user | Add others as user’s mailbox delegate |
| Dynamic workflow (triggered by trigger events) | Users | Block user | Send email to manager or specified users |
| Dynamic workflow (triggered by trigger events) | Users | Update user | Assign licenses |
| Dynamic workflow (triggered by trigger events) | Users | Update user | Remove licenses |
| Dynamic workflow (triggered by trigger events) | Users | Update user | Add to the Group |
| Dynamic workflow (triggered by trigger events) | Users | Update user | Add to the Team |
| Dynamic workflow (triggered by trigger events) | Users | Update user | Remove from the Group |
| Dynamic workflow (triggered by trigger events) | Users | Update user | Remove from the Team |
| Dynamic workflow (triggered by trigger events) | Users | Update user | Send email to manager or specified users |
| Dynamic workflow (triggered by trigger events) | Users | Password reset/change | Block user |
| Dynamic workflow (triggered by trigger events) | Users | Password reset/change | Send email to manager or specified users |
| Dynamic workflow (triggered by trigger events) | Users | Failed sign-in*Note: A Microsoft Entra ID P1 or P2 license is required to detect this event. | Delete user |
| Dynamic workflow (triggered by trigger events) | Users | Failed sign-in*Note: A Microsoft Entra ID P1 or P2 license is required to detect this event. | Block user |
| Dynamic workflow (triggered by trigger events) | Users | Failed sign-in*Note: A Microsoft Entra ID P1 or P2 license is required to detect this event. | Send email to manager or specified users |
| Dynamic workflow (triggered by trigger events) | Microsoft Teams | Add user to Team | Send email to Team owners |
| Dynamic workflow (triggered by trigger events) | Microsoft Teams | Add user to Team | Send email to specific users |
| Dynamic workflow (triggered by trigger events) | Microsoft Teams | Add user to Team | Send email to primary contact |
| Dynamic workflow (triggered by trigger events) | Microsoft Teams | Add user to Team | Send email to secondary contact |
| Dynamic workflow (triggered by trigger events) | Groups | Add user to Group*Note: This trigger event is currently only applicable to Microsoft 365 Groups. | Send email to Group owners |
| Dynamic workflow (triggered by trigger events) | Groups | Add user to Group*Note: This trigger event is currently only applicable to Microsoft 365 Groups. | Send email to specific users |
| Dynamic workflow (triggered by trigger events) | Groups | Add user to Group*Note: This trigger event is currently only applicable to Microsoft 365 Groups. | Send email to primary contact |
| Dynamic workflow (triggered by trigger events) | Groups | Add user to Group*Note: This trigger event is currently only applicable to Microsoft 365 Groups. | Send email to secondary contact |
| Dynamic workflow (triggered by trigger events) | SharePoint | SharePoint sites file access | Remove access |
| Dynamic workflow (triggered by trigger events) | SharePoint | SharePoint sites file access | Block user |
| Dynamic workflow (triggered by trigger events) | SharePoint | SharePoint sites file access | Send email to manager or specified users |
| Dynamic workflow (triggered by trigger events) | SharePoint | SharePoint sites file access | Apply sensitivity label |
| Dynamic workflow (triggered by trigger events) | SharePoint | Group team site file access | |
| *Note: This includes Teams connected sites | Remove access | ||
| Dynamic workflow (triggered by trigger events) | SharePoint | Group team site file access | |
| *Note: This includes Teams connected sites | Block user | ||
| Dynamic workflow (triggered by trigger events) | SharePoint | Group team site file access | |
| *Note: This includes Teams connected sites | Send email to manager or specified users | ||
| Dynamic workflow (triggered by trigger events) | SharePoint | Group team site file access | |
| *Note: This includes Teams connected sites | Apply sensitivity label | ||
| Dynamic workflow (triggered by trigger events) | SharePoint | Add user to SharePoint site | Send email to site owners |
| Dynamic workflow (triggered by trigger events) | SharePoint | Add user to SharePoint site | Send email to site admins |
| Dynamic workflow (triggered by trigger events) | SharePoint | Add user to SharePoint site | Send email to specific users |
| Dynamic workflow (triggered by trigger events) | SharePoint | Add user to SharePoint site | Send email to primary contact |
| Dynamic workflow (triggered by trigger events) | SharePoint | Add user to SharePoint site | Send email to secondary contact |
| Dynamic workflow (triggered by trigger events) | SharePoint | Add user to Group team site | Send email to Group owners |
| Dynamic workflow (triggered by trigger events) | SharePoint | Add user to Group team site | Send email to site admins |
| Dynamic workflow (triggered by trigger events) | SharePoint | Add user to Group team site | Send email to site owners |
| Dynamic workflow (triggered by trigger events) | SharePoint | Add user to Group team site | Send email to specific users |
| Dynamic workflow (triggered by trigger events) | SharePoint | Add user to Group team site | Send email to primary contact |
| Dynamic workflow (triggered by trigger events) | SharePoint | Add user to Group team site | Send email to secondary contact |
| Dynamic workflow (triggered by trigger events) | OneDrive | Files access | Remove access |
| Dynamic workflow (triggered by trigger events) | OneDrive | Files access | Block user |
| Dynamic workflow (triggered by trigger events) | OneDrive | Files access | Send email to specific users |
| Dynamic workflow (triggered by trigger events) | OneDrive | Files access | Apply sensitivity label |
| Dynamic workflow(triggered by object conditions) | Microsoft Teams | N/A | Remove all guests |
| Dynamic workflow(triggered by object conditions) | Microsoft Teams | N/A | Archive/Unarchive Teams |
| Dynamic workflow(triggered by object conditions) | Microsoft Teams | N/A | Apply sensitivity label |
| Dynamic workflow(triggered by object conditions) | Microsoft Teams | N/A | Manage Team/channel settings |
| Dynamic workflow(triggered by object conditions) | Microsoft Teams | N/A | Send emails |
| Dynamic workflow(triggered by object conditions) | Microsoft Teams | N/A | Apply renewal profile |
| Dynamic workflow(triggered by object conditions) | Microsoft Teams | N/A | Restart renewal |
| Dynamic workflow(triggered by object conditions) | Microsoft Teams | N/A | Trigger contact election task |
| Dynamic workflow(triggered by object conditions) | Microsoft Teams | N/A | Edit metadata |
| Dynamic workflow(triggered by object conditions) | Microsoft Teams | N/A | Apply contact election profile |
| Dynamic workflow(triggered by object conditions) | Microsoft Teams | N/A | Assign renewal tasks |
| Dynamic workflow(triggered by object conditions) | Microsoft Teams | N/A | Auto-complete renewal |
| Dynamic workflow(triggered by object conditions) | Microsoft Teams | N/A | Specify contacts |
| Dynamic workflow(triggered by object conditions) | Groups | N/A | Trigger contact election task |
| Dynamic workflow(triggered by object conditions) | Groups | N/A | Apply renewal profile |
| Dynamic workflow(triggered by object conditions) | Groups | N/A | Restart renewal |
| Dynamic workflow(triggered by object conditions) | Groups | N/A | Apply sensitivity label |
| Dynamic workflow(triggered by object conditions) | Groups | N/A | Change privacy setting |
| Dynamic workflow(triggered by object conditions) | Groups | N/A | Hide from address list |
| Dynamic workflow(triggered by object conditions) | Groups | N/A | Send emails |
| Dynamic workflow(triggered by object conditions) | Groups | N/A | Edit metadata |
| Dynamic workflow(triggered by object conditions) | Groups | N/A | Assign renewal tasks |
| Dynamic workflow(triggered by object conditions) | Groups | N/A | Auto-complete renewal |
| Dynamic workflow(triggered by object conditions) | Groups | N/A | Specify contacts |
| Dynamic workflow(triggered by object conditions) | Groups | N/A | Apply contact election profile |
| Dynamic workflow(triggered by object conditions) | Users | N/A | Remove licenses |
| Dynamic workflow(triggered by object conditions) | Users | N/A | Remove duplicate licenses |
| Dynamic workflow(triggered by object conditions) | Users | N/A | Block sign-in |
| Dynamic workflow(triggered by object conditions) | SharePoint | N/A | Archive/Reactivate |
| Dynamic workflow(triggered by object conditions) | SharePoint | N/A | Restart renewal |
| Dynamic workflow(triggered by object conditions) | SharePoint | N/A | Trigger contact election task |
| Dynamic workflow(triggered by object conditions) | SharePoint | N/A | Change site status |
| Dynamic workflow(triggered by object conditions) | SharePoint | N/A | Edit storage limit |
| Dynamic workflow(triggered by object conditions) | SharePoint | N/A | Apply sensitivity label |
| Dynamic workflow(triggered by object conditions) | SharePoint | N/A | Send emails |
| Dynamic workflow(triggered by object conditions) | SharePoint | N/A | Apply renewal profile |
| Dynamic workflow(triggered by object conditions) | SharePoint | N/A | Edit metadata |
| Dynamic workflow(triggered by object conditions) | SharePoint | N/A | Apply contact election profile |
| Dynamic workflow(triggered by object conditions) | SharePoint | N/A | Assign renewal tasks |
| Dynamic workflow(triggered by object conditions) | SharePoint | N/A | Auto-complete renewal |
| Dynamic workflow(triggered by object conditions) | SharePoint | N/A | Specify contacts |
| Manually triggered workflow | Exchange | N/A | Convert user mailbox to shared |
| Manually triggered workflow | Exchange | N/A | Archive mailbox |
| Manually triggered workflow | Exchange | N/A | Hide from address list |
| Manually triggered workflow | Exchange | N/A | Configure mailbox automatic replies |
| Manually triggered workflow | Exchange | N/A | Add others as user’s mailbox delegate |
| Manually triggered workflow | Exchange | N/A | Configure mailbox delegation |
| Manually triggered workflow | Exchange | N/A | Send email to mailbox users |
| Manually triggered workflow | Exchange | N/A | Send email to manager |
| Manually triggered workflow | Exchange | N/A | Send email to mailbox delegates |
| Manually triggered workflow | Exchange | N/A | Send email to specific users |
| Manually triggered workflow | Exchange | N/A | Send email to primary and secondary contacts |
| Manually triggered workflow | Teams | N/A | Update Team owners |
| Manually triggered workflow | Teams | N/A | Update Team members |
| Manually triggered workflow | Teams | N/A | Remove all guests |
| Manually triggered workflow | Teams | N/A | Archive Teams |
| Manually triggered workflow | Teams | N/A | Update sensitivity label |
| Manually triggered workflow | Teams | N/A | Manage Team privacy setting |
| Manually triggered workflow | Teams | N/A | Manage Team/channel setting |
| Manually triggered workflow | Teams | N/A | Send email to Team owners |
| Manually triggered workflow | Teams | N/A | Send email to Team members |
| Manually triggered workflow | Teams | N/A | Send email to specific users |
| Manually triggered workflow | Teams | N/A | Send email to primary and secondary contacts |
| Manually triggered workflow | Groups | N/A | Update Group owners |
| Manually triggered workflow | Groups | N/A | Update Group members |
| Manually triggered workflow | Groups | N/A | Remove specified users |
| Manually triggered workflow | Groups | N/A | Send email to Group owners |
| Manually triggered workflow | Groups | N/A | Send email to Group members |
| Manually triggered workflow | Groups | N/A | Send email to specific users |
| Manually triggered workflow | Groups | N/A | Send email to primary and secondary contacts |
| Manually triggered workflow | Users | N/A | Convert mailbox to shared |
| Manually triggered workflow | Users | N/A | Archive mailboxes |
| Manually triggered workflow | Users | N/A | Hide from address list |
| Manually triggered workflow | Users | N/A | Add others as user’s mailbox delegate |
| Manually triggered workflow | Users | N/A | Configure mailbox automatic replies |
| Manually triggered workflow | Users | N/A | Configure mailbox delegation |
| Manually triggered workflow | Users | N/A | Assign others as user’s OneDrive administrator |
| Manually triggered workflow | Users | N/A | Update Group owners |
| Manually triggered workflow | Users | N/A | Update Group members |
| Manually triggered workflow | Users | N/A | Assign licenses |
| Manually triggered workflow | Users | N/A | Replace licenses |
| Manually triggered workflow | Users | N/A | Remove licenses |
| Manually triggered workflow | Users | N/A | Block users |
| Manually triggered workflow | Users | N/A | Delete users |
| Manually triggered workflow | Users | N/A | Reset password |
| Manually triggered workflow | Users | N/A | Configure MFA settings |
| Manually triggered workflow | Users | N/A | Send email to user |
| Manually triggered workflow | Users | N/A | Send email to manager |
| Manually triggered workflow | Users | N/A | Send email to mailbox delegates |
| Manually triggered workflow | Users | N/A | Send email to specific users |
| Manually triggered workflow | SharePoint | N/A | Update site owners |
| Manually triggered workflow | SharePoint | N/A | Update site visitors |
| Manually triggered workflow | SharePoint | N/A | Update site members |
| Manually triggered workflow | SharePoint | N/A | Update additional admins |
| Manually triggered workflow | SharePoint | N/A | Remove specific users |
| Manually triggered workflow | SharePoint | N/A | Archive/Reactivate |
| Manually triggered workflow | SharePoint | N/A | Update sensitivity label |
| Manually triggered workflow | SharePoint | N/A | Edit storage limit |
| Manually triggered workflow | SharePoint | N/A | Manage sharing settings |
| Manually triggered workflow | SharePoint | N/A | Update site status to read only |
| Manually triggered workflow | SharePoint | N/A | Delete sites |
| Manually triggered workflow | SharePoint | N/A | Send email to site owners |
| Manually triggered workflow | SharePoint | N/A | Send email to site visitors |
| Manually triggered workflow | SharePoint | N/A | Send email to site members |
| Manually triggered workflow | SharePoint | N/A | Send mail to specified users |
| Manually triggered workflow | OneDrive | N/A | Assign others as user’s OneDrive administrator |
| Manually triggered workflow | OneDrive | N/A | Manage sharing settings |
| Manually triggered workflow | OneDrive | N/A | Edit storage limit |
| Manually triggered workflow | OneDrive | N/A | Update OneDrive status to read only |
On this page