Microsoft 365 workflows
A Microsoft 365 workflow is a short, fixed list of Graph actions with blanks to fill in, such as onboarding a new employee.
How it differs from an instruction
An instruction is guidance the AI interprets on a machine. A workflow is exact. It lists the actions to take in Microsoft 365, and you supply the values each time you run it: the person's name, the group, the address.
Workflows do not start from tickets. You run one yourself, and a run that changes a tenant follows the approval rules below.
The built-in workflows
| Workflow | Fields you fill in | What it does |
|---|---|---|
| Onboard New Employee | Full name, team name | Creates the user, creates the team group, and adds the user to it. |
| Reset User Password | User email or id, temporary password | Sets a new temporary password. |
| Remove User from Group | User email or id, group | Removes the membership. |
You can write your own from the Microsoft 365 start option in the Autopilot editor.
Approvals
Microsoft 365 actions fall into three tiers. Looking things up is safe. Creating or changing users and groups, changing membership and assigning licences are routine changes, which wait for a click unless the setting allows them. Deleting a user, deleting a group and resetting a password always need a person, whatever any setting says.
Because the workflow's actions are fixed, what you approve is exactly what runs.
Before you can run one
Each client's tenant needs one administrator consent, given from that client's company page. Consent for one client never reaches another. The Microsoft 365 reference page covers the setup and what the assistant can and cannot read.