Showing results for 
Search instead for 
Did you mean: 
Frequent Visitor

Request Sign Off Approval Flow Fails

All -- trying to use the default Request Sign Off approval flow starting from OneDrive for Business.  I am sending approval request to myself at the moment, although it also fails when I try to send to another user. 


The Flow will process to the step where it tries to access the (UPN) for the entered O365 user.  It fails with "Forbidden" at the GET USER PROFILE (v2) step.


Are there permissions that need to be granted by an ADMIN?  If so, how do I politely requests those from our IT group? 




The Full Flow stepsThe Full Flow stepsThe template that I'm usingThe template that I'm usingFailed stepFailed stepWhere and How I start the flowWhere and How I start the flow




Community Support
Community Support

Hi @JohnH ,


I did a test on my side. As long as it is the same tenant's 0ffice 365 user, Get user profile (V2) action can be used regardless of whether whose role is an administrator.

But you need the following permissions, please refer to the link below for more details:

Also please check Flow run history to see if User (UPN) is a valid email address.

Image reference:



Best Regards,

Community Support Team _ Barry
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Thanks Barry == I can confirm the returned email is a valid one in the failed UPN field.


I'll forward the link to the permissions to our IT folks and see if they can double check those for me.



Helpful resources

Community Conference

Power Platform Community Conference

Check out the on demand sessions that are available now!

Power Platform ISV Studio

Power Platform ISV Studio

ISV Studio is designed to become the go-to Power Platform destination for ISV’s to monitor & manage published applications.

Users online (8,279)