Scheduled disabling of an account

[jam3579]

I'm trying to setup a flow that will allow me to disable an account at a specified time. I currently have it setup to use an adaptive card in Teams, which allows me to search for a user, then a date and a time field to specify the exact Delay until time before deactivating the account.

I have been using the HTTP connector to disable the account with Graph up to this point, but that connector is technically marked as Premium, so even though it working fine I'm just waiting on MS to kill it for me.

I tried using the standard 'Send an HTTP request' from the Office 365 Users connector, but this doesn't seem to work as the URI treats the user ID as part of the resource (users/[ID])/[Expected Object] and not as the object I am trying to modify (users)/[ID as Object]. This seems to be intentional for whatever reason, from the documentation.

I then looked at the Entra ID connector and the Update user action. This has a nice looking toggle for disabling the account, which errors out saying I have insufficient privileges when I attempt to use it. I can change the other values just fine when testing. Documentation for this one says I need Group, User, and Directory permissions - ReadWrite.All all round. I have these and Global admin but still get rejected on live accounts.

When I create a test account I can enable and disable it just fine, but accounts that have been signed into previously and are 'active' I guess you'd say, just don't seem to work. Using the Graph Explorer site works just fine as well with my account when testing for privileges if that helps, although the current HTTP connector is using AD OAuth and a Client ID/secret.

I'm all ears for ideas on why this doesn't want to play ball. Cheers