App to disable / enable AD accounts from a text file

[ChLowden]

Hello

I am investigating the possibilities of creating an api that will recurringly parse a text file email addresses so that AD accounts are active or disabled.

My Financial director wants to block user AD accounts if timesheets are not filled in on the accounting system. The accounting system can export a text list of user accounts that are not in order. Is it possible for an app to parse the emails / AD names & automate the activation or disable of the accounts in the AD ? Can power apps create GPOs to control the AD?

Any thoughts on this "idea" would be most welcome.

Many thanks

[analmei]

Hello @ChLowden , 

In the Power Apps, you can use the Azure AD connector.

1. To export a text list of user accounts, you can use the Get user action to get each email. 

2. Parse the emails / AD names, https://docs.microsoft.com/en-us/powerapps/maker/canvas-apps/functions/function-json

3. Automate the activation or disable of the accounts in the AD: not sure if it is possible but you can try with Update user or Remove Member From Group. 

4. Can power apps create GPOs to control the AD? 

I think the answer is no, but you can explore this article: https://powerapps.microsoft.com/en-us/blog/implementing-role-based-permission/ 

Best regards,

Ana Almeida | Power Platform Support Engineer

[ChLowden · Accepted solution]

Hello Analmei

Thank you for your response. Lots to read and learn. I will try to get my head around all this.
Many thanks

Christopher