Author: Abdul Kazi

Lifecycle Workflows – Microsoft Entra Identity Governance

Lifecycle workflow is an identity governance feature which helps with on-boarding and off-boarding users. I wanted to go through the features of lifecycle workflow, however, I ran into a snag due to licensing requirement.

What are lifecycle workflows

This feature requires Microsoft Entra ID Governance license.
Microsoft Entra ID Governance licensing fundamentals

Since I did not have a Microsoft Entra ID Governance license, I signed up for a one month Microsoft Entra ID Governance Trial

Once I assigned the Microsoft Entra ID Governance license to my account, the lifecycle workflows features became available.

Abiding by the principle of least privilege role, Lifecycle Workflows Administrator is a Microsoft Entra built-in role, which should be assigned to users who will be managing lifecycle workflows.

Lifecycle Workflows Administrator

In the next blog post, we will go through setting up workflow for various scenarios.

Microsoft Entra ID Governance 

I had to test an Access Package use case with a least privilege role so I assigned the user Identity Governance administrator role.

To my surprise, this role does not allow adding SharePoint Sites as a resource.

After looking up the Entra ID role, I found out that the SharePoint administrator role is needed to add SharePoint Sites as a resource.

https://learn.microsoft.com/en-us/entra/id-governance/entitlement-management-delegate#required-roles-to-add-resources-to-a-catalog

I added the SharePoint administrator role to the user.

Once I added the SharePoint administrator role, I was able to add the SharePoint sites