Manage users synchronized from Active Directory Domain Services with workflows
Workflows created by Lifecycle workflows can be used to manage the lifecycle of users synchronized from Active Directory Domain Services (AD DS). Synced AD DS support allows you to use workflow tasks to enable, disable, and delete synchronized users. In this article, you're walked through the steps of enabling a user account task to be run for users synchronized from AD DS.
Prerequisites
Using this feature requires Microsoft Entra ID Governance or Microsoft Entra Suite licenses. To find the right license for your requirements, see Microsoft Entra ID Governance licensing fundamentals.
While most Lifecycle workflow tasks can manage users synchronized from Active Directory Domain Services without any extra configuration, certain tasks such as enabling, disabling, and deleting tasks require some extra configuration. For more information on setting these prerequisites, see: User account tasks.
Configure a user account task to manage users synchronized from Active Directory Domain Services using the Microsoft Entra admin center
Account related tasks within workflows can be quickly edited to apply to users synchronized from Active Directory Domain Services. To edit a task in such way using the Microsoft Entra admin center, you do the following steps:
Sign in to the Microsoft Entra admin center as at least a Lifecycle Workflows Administrator.
Browse to Identity governance > Lifecycle workflows > Workflows.
Select the workflow you want to edit the task within.
On the workflow screen, select Tasks.
On the Tasks screen, either select an existing task you want to run for users synchronized from Active Directory Domain Services, or create a new one by selecting Add task.
On the individual task screen, enable the checkbox that corresponds to running for a synchronized Active Directory Domain Services user. The following image shows it being enabled for a delete user account task.
Select Save.
Edit a user account task to be compatible with users synchronized from Active Directory Domain Services using Microsoft Graph
To manage user tasks to be compatible with users synchronized from Active Directory Domain Services via API using Microsoft Graph, see: Configure the arguments for built-in Lifecycle Workflow tasks.