Creating workflows for Microsoft users

Let Oomnitza be your single source of truth!

You'll get visibility of your users as data from Microsoft is automatically transformed into consumable information and actionable insights.

Connect Oomnitza and Microsoft in minutes

Get the information and insights that you need by creating configurable workflows for:

• • Getting a user's role
  • Offboarding Microsoft users

Navigation

Before you start

 Creating workflows

Before you start

Before you can create the integration with Oomnitza, you must complete the following steps:

1. Generate your OAuth 2.0 credentials in Azure
2. Add your OAuth 2.0 credentials to Oomnitza

We recommend that you also create an extended integration for Microsoft users.  You can use the information retrieved in these integrations to trigger workflows.

Creating workflows

You can create a Saas User workflow in Oomnitza using the Microsoft User Role preset.  This preset supplies you with the license details of Microsoft enterprise users. For more information, see Microsoft Graph API Docs: List licenseDetails

Prerequisites

Before you create a SaaS user workflow, you should have already run your extended user integration and selected User plus SaaS User to populate the software entry in the Software > SaaS menu.

To create a Saas User workflow using the Microsoft User Role preset, complete the following steps:

1. Click Configuration > Workflows 
2. Click Add (+) and select Software SaaS Users from the list.
3. Enter the name and a description of the workflow. 
4. Edit the Begin block by adding the rules that will trigger the workflow. For further information see SaaS User Roles.
5. Click the Blocks tab, and drag and drop the SaaS User Role retrieval block onto the canvas.
6. Click the Edit icon.
7. Enter Microsoft in the search field and choose the Microsoft User Role preset.
8. Click the right arrow >.
9. Enter your Credentials.
10. Select the Deactivate User checkbox to deactivate the SaaS user in SaaS > Microsoft  > Users if they are not found in your Microsoft instance.
11. Select search by UserPrincipleName to retrieve users based on their UserPrincipal Name. This is the preferred option if you don't have email addresses linked to your users. If you don't choose this option, the search method will retrieve users based on their email addresses.
12. Click SAVE.
13. Connect the blocks.
14. Save, validate, and activate your workflow.

To view active Microsoft users in the SaaS Users UI, complete the following steps:

1. Click Software from the menu.
2. Select the SaaS tab, and select your software entry for Microsoft.
3. Click Users in the side pane.
4. The Role column will be populated with the user details to confirm that this user has been found in your Microsoft SaaS. 

Next steps

Create an offboarding workflow using an API block. Select the following presets:

• Microsoft Delete User preset deletes a Microsoft user. For further information, see Microsoft Graph API Docs: Delete a user
• Microsoft Disable User preset enables you to disable a user in Microsoft by calling the update web service and setting the field account enabled to false. For further information, see Microsoft Graph API Docs: Update user

Important
When creating the offboarding workflow, ensure that the Begin block criteria accurately identifies inactive users. For example, for SaaS user workflows you can set the To be Deleted in SaaS flag to Yes, or for Users workflows, you can set the Offboarding Date to Current date.

Reference articles for creating workflows

• Creating SaaS user workflows.
• Offboarding SaaS users.