You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
You can remove workflows that are no longer needed. Deleting these workflows allows you to make sure your lifecycle strategy is up to date. When a workflow is deleted, it enters a soft delete state. During this period, it's still able to be viewed within the deleted workflows list, and can be restored if needed. 30 days after a workflow enters a soft delete state it will be permanently removed. If you don't wish to wait 30 days for a workflow to permanently delete you can always manually delete it yourself.
20
20
21
+
## Prerequisites
22
+
23
+
- Azure AD Premium P2
24
+
25
+
For more information, see: [License requirements](what-are-lifecycle-workflows.md#license-requirements)
Copy file name to clipboardExpand all lines: articles/active-directory/governance/lifecycle-workflows-deployment.md
+8-5Lines changed: 8 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -40,10 +40,10 @@ Planning your Lifecycle Workflow deployment is essential to make sure you achiev
40
40
41
41
For more information on deployment plans, see [Azure AD deployment plans](../fundamentals/active-directory-deployment-plans.md)
42
42
43
-
## Licenses
43
+
## License requirements
44
44
45
45
46
-
[!INCLUDE [Azure AD Premium P2 license](../../../includes/active-directory-p2-license.md)]
46
+
[!INCLUDE [Azure AD Premium P2 license](../../../includes/lifecycle-workflows-license.md)]
47
47
48
48
>[!Note]
49
49
>Be aware that if your license expires, any workflows that you have created will stop working.
@@ -104,21 +104,24 @@ This section introduces Lifecycle Workflow concepts you should know before you p
104
104
105
105
106
106
## Prerequisites to deploying Lifecycle Workflows
107
-
The following is important information about your organization and the technologies that need to be in place prior to deploying Lifecycle Workflows. Ensure that you can answer yes to each of the items before attempting to deploy Lifecycle Workflows.
107
+
108
+
The following information is important information about your organization and the technologies that need to be in place prior to deploying Lifecycle Workflows. Ensure that you can answer yes to each of the items before attempting to deploy Lifecycle Workflows.
108
109
109
110
|Item|Description|Documentation|
110
111
|-----|-----|-----|
111
112
|Inbound Provisioning|You have a process to create user accounts for employees in Azure AD such as HR inbound, SuccessFactors, or MIM.<br><br> Alternatively you have a process to create user accounts in Active Directory and those accounts are provisioned to Azure AD.|[Workday to Active Directory](../saas-apps/workday-inbound-tutorial.md)<br><br>[Workday to Azure AD](../saas-apps/workday-inbound-tutorial.md)<br><br>[SuccessFactors to Active Directory](../saas-apps/sap-successfactors-inbound-provisioning-tutorial.md)</br></br>[SuccessFactors to Azure AD](../saas-apps/sap-successfactors-inbound-provisioning-cloud-only-tutorial.md)<br><br>[Azure AD Connect](../hybrid/whatis-azure-ad-connect-v2.md)<br><br>[Azure AD Connect cloud sync](../cloud-sync/what-is-cloud-sync.md)|
112
-
|Attribute synchronization|The accounts in Azure AD have the employeeHireDate and employeeLeaveDateTime attributes populated. The values may be populated when the accounts are created from an HR system or synchronized from AD using Azure AD Connect or cloud sync. You have additional attributes, that will be used to determine the scope, such as department, populated or the ability to populate, with data.|[How to synchronize attributes for Lifecycle Workflows](how-to-lifecycle-workflow-sync-attributes.md)
113
+
|Attribute synchronization|The accounts in Azure AD have the employeeHireDate and employeeLeaveDateTime attributes populated. The values may be populated when the accounts are created from an HR system or synchronized from AD using Azure AD Connect or cloud sync. You have additional attributes that will be used to determine the scope such as department, populated or the ability to populate, with data.|[How to synchronize attributes for Lifecycle Workflows](how-to-lifecycle-workflow-sync-attributes.md)
113
114
114
115
## Understanding parts of a workflow
116
+
115
117
Before you begin planning a Lifecycle Workflow deployment, you should become familiar with the parts of workflow and the terminology around Lifecycle Workflows.
116
118
117
119
The [Understanding Lifecycle Workflows](understanding-lifecycle-workflows.md) document, uses the portal to explain the parts of a workflow. The [Developer API reference Lifecycle Workflows](lifecycle-workflows-developer-reference.md) document, uses a GRAPH example to explain the parts of a workflow.
118
120
119
121
You can use this document to become familiar with the parts of workflow prior to deploying them.
120
122
121
123
## Limitations and constraints
124
+
122
125
The following table provides information that you need to be aware of as you create and deploy Lifecycle workflows.
123
126
124
127
|Item|Description|
@@ -133,7 +136,7 @@ The following table provides information that you need to be aware of as you cre
133
136
134
137
The following is additional information you should be aware of.
135
138
136
-
- You cannot enable the schedule for the Real-Time Leaver scenario. This is by design.
139
+
- You can't enable the schedule for the Real-Time Leaver scenario. This is by design.
Copy file name to clipboardExpand all lines: articles/active-directory/governance/tutorial-offboard-custom-workflow-portal.md
+13-7Lines changed: 13 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -26,9 +26,15 @@ This off-boarding scenario will run a workflow on-demand and accomplish the foll
26
26
27
27
You may learn more about running a workflow on-demand [here](on-demand-workflow.md).
28
28
29
+
## Prerequisites
30
+
31
+
- Azure AD Premium P2
32
+
33
+
For more information, see: [License requirements](what-are-lifecycle-workflows.md#license-requirements)
34
+
29
35
## Before you begin
30
36
31
-
As part of the prerequisites for completing this tutorial, you will need an account that has group and Teams memberships and that can be deleted during the tutorial. For more comprehensive instructions on how to complete these prerequisite steps, you may refer to the [Preparing user accounts for Lifecycle workflows tutorial](tutorial-prepare-azure-ad-user-accounts.md).
37
+
As part of the prerequisites for completing this tutorial, you'll need an account that has group and Teams memberships and that can be deleted during the tutorial. For more comprehensive instructions on how to complete these prerequisite steps, you may refer to the [Preparing user accounts for Lifecycle workflows tutorial](tutorial-prepare-azure-ad-user-accounts.md).
32
38
33
39
The leaver scenario can be broken down into the following:
34
40
-**Prerequisite:** Create a user account that represents an employee leaving your organization
@@ -50,10 +56,10 @@ Use the following steps to create a leaver on-demand workflow that will execute
50
56
6. From the templates, select **Select** under **Real-time employee termination**.
51
57
:::image type="content" source="media/tutorial-lifecycle-workflows/select-template.png" alt-text="Screenshot of selecting template leaver workflow." lightbox="media/tutorial-lifecycle-workflows/select-template.png":::
52
58
53
-
7. Next, you will configure the basic information about the workflow. Select **Next:Review tasks** when you are done with this step.
59
+
7. Next, you'll configure the basic information about the workflow. Select **Next:Review tasks** when you're done with this step.
54
60
:::image type="content" source="media/tutorial-lifecycle-workflows/real-time-leaver.png" alt-text="Screenshot of review template tasks." lightbox="media/tutorial-lifecycle-workflows/real-time-leaver.png":::
55
61
56
-
8. On the following page, you may inspect the tasks if desired but no additional configuration is needed. Select **Next: Select users** when you are finished.
62
+
8. On the following page, you may inspect the tasks if desired but no additional configuration is needed. Select **Next: Select users** when you're finished.
57
63
:::image type="content" source="media/tutorial-lifecycle-workflows/real-time-tasks.png" alt-text="Screenshot of template tasks." lightbox="media/tutorial-lifecycle-workflows/real-time-tasks.png":::
58
64
59
65
9. For the user selection, select **Select users**. This allows you to select users for which the workflow will be executed immediately after creation. Regardless of the selection, you can run the workflow on-demand later at any time as needed.
@@ -62,10 +68,10 @@ Use the following steps to create a leaver on-demand workflow that will execute
62
68
10. Next, select on **+Add users** to designate the users to be executed on this workflow.
63
69
:::image type="content" source="media/tutorial-lifecycle-workflows/real-time-add-users.png" alt-text="Screenshot of real time leaver add users." lightbox="media/tutorial-lifecycle-workflows/real-time-add-users.png":::
64
70
65
-
11. A panel with the list of available users will pop-up on the right side of the screen. Select **Select** when you are done with your selection.
71
+
11. A panel with the list of available users will popup on the right side of the screen. Select **Select** when you're done with your selection.
66
72
:::image type="content" source="media/tutorial-lifecycle-workflows/real-time-user-list.png" alt-text="Screenshot of real time leaver template selected users." lightbox="media/tutorial-lifecycle-workflows/real-time-user-list.png":::
67
73
68
-
12. Select **Next: Review and create** when you are satisfied with your selection.
74
+
12. Select **Next: Review and create** when you're satisfied with your selection.
69
75
:::image type="content" source="media/tutorial-lifecycle-workflows/real-time-review-users.png" alt-text="Screenshot of reviewing template users." lightbox="media/tutorial-lifecycle-workflows/real-time-review-users.png":::
70
76
71
77
13. On the review blade, verify the information is correct and select **Create**.
@@ -87,12 +93,12 @@ To run a workflow on-demand, for users using the Azure portal, do the following
87
93
88
94
## Check tasks and workflow status
89
95
90
-
At any time, you may monitor the status of the workflows and the tasks. As a reminder, there are three different data pivots, users runs, and tasks which are currently available in public preview. You may learn more in the how-to guide [Check the status of a workflow (preview)](check-status-workflow.md). In the course of this tutorial, we will look at the status using the user focused reports.
96
+
At any time, you may monitor the status of the workflows and the tasks. As a reminder, there are three different data pivots, users runs, and tasks that are currently available in public preview. You may learn more in the how-to guide [Check the status of a workflow (preview)](check-status-workflow.md). In the course of this tutorial, we'll look at the status using the user focused reports.
91
97
92
98
1. To begin, select the **Workflow history (Preview)** tab on the left to view the user summary and associated workflow tasks and statuses.
93
99
:::image type="content" source="media/tutorial-lifecycle-workflows/workflow-history-real-time.png" alt-text="Screenshot of real time history overview." lightbox="media/tutorial-lifecycle-workflows/workflow-history-real-time.png":::
94
100
95
-
1. Once the **Workflow history (Preview)** tab has been selected, you will land on the workflow history page as shown.
101
+
1. Once the **Workflow history (Preview)** tab has been selected, you'll land on the workflow history page as shown.
96
102
:::image type="content" source="media/tutorial-lifecycle-workflows/user-summary-real-time.png" alt-text="Screenshot of real time workflow history." lightbox="media/tutorial-lifecycle-workflows/user-summary-real-time.png":::
97
103
98
104
1. Next, you may select **Total tasks** for the user Jane Smith to view the total number of tasks created and their statuses. In this example, there are three total tasks assigned to the user Jane Smith.
Copy file name to clipboardExpand all lines: articles/active-directory/governance/tutorial-onboard-custom-workflow-portal.md
+6Lines changed: 6 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -22,6 +22,12 @@ This pre-hire scenario will generate a temporary access pass for our new employe
22
22
23
23
:::image type="content" source="media/tutorial-lifecycle-workflows/arch-2.png" alt-text="Screenshot of the lifecycle workflow scenario." lightbox="media/tutorial-lifecycle-workflows/arch-2.png":::
24
24
25
+
## Prerequisites
26
+
27
+
- Azure AD Premium P2
28
+
29
+
For more information, see: [License requirements](what-are-lifecycle-workflows.md#license-requirements)
30
+
25
31
## Before you begin
26
32
27
33
Two accounts are required for this tutorial, one account for the new hire and another account that acts as the manager of the new hire. The new hire account must have the following attributes set:
Copy file name to clipboardExpand all lines: articles/active-directory/governance/tutorial-scheduled-leaver-portal.md
+6Lines changed: 6 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -23,6 +23,12 @@ This post off-boarding scenario will run a scheduled workflow and accomplish the
23
23
2. Remove user from all Teams
24
24
3. Delete user account
25
25
26
+
## Prerequisites
27
+
28
+
- Azure AD Premium P2
29
+
30
+
For more information, see: [License requirements](what-are-lifecycle-workflows.md#license-requirements)
31
+
26
32
## Before you begin
27
33
28
34
As part of the prerequisites for completing this tutorial, you will need an account that has licenses and Teams memberships that can be deleted during the tutorial. For more comprehensive instructions on how to complete these prerequisite steps, you may refer to the [Preparing user accounts for Lifecycle workflows tutorial](tutorial-prepare-azure-ad-user-accounts.md).
Copy file name to clipboardExpand all lines: articles/active-directory/governance/understanding-lifecycle-workflows.md
+6-2Lines changed: 6 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,10 +18,14 @@ The following reference document provides an overview of a workflow created usin
18
18
19
19
[](media/understanding-lifecycle-workflows/workflow-2.png#lightbox)
20
20
21
-
## Licenses and Permissions
21
+
## License requirements
22
22
23
23
24
-
[!INCLUDE [Azure AD Premium P2 license](../../../includes/active-directory-p2-license.md)]
24
+
[!INCLUDE [Azure AD Premium P2 license](../../../includes/lifecycle-workflows-license.md)]
25
+
26
+
## Permissions
27
+
28
+
The following permissions are required for Lifecycle Workflows:
Copy file name to clipboardExpand all lines: articles/active-directory/governance/what-are-lifecycle-workflows.md
+12Lines changed: 12 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -68,7 +68,19 @@ You can use Lifecycle workflows to address any of the following conditions.
68
68
-**Automate user account management**: Making sure users who are leaving have their access to resources revoked is a key part of the identity lifecycle process. Lifecycle Workflows allow you to automate the disabling and removal of user accounts.
69
69
-**Integrate with Logic Apps**: Ability to apply logic apps to extend workflows for more complex scenarios using your existing Logic apps.
70
70
71
+
## License requirements
71
72
73
+
[!INCLUDE [Azure AD Premium P2 license](../../../includes/lifecycle-workflows-license.md)]
74
+
75
+
76
+
### How many licenses must you have?
77
+
78
+
To utilize the Lifecycle Workflows feature, you must have at least one Azure AD Premium P2 license in your tenant. With one license, you're able to:
79
+
80
+
- Create, manage, and delete workflows for any, or all, users in your tenant up to the total limit of 50 workflows.
81
+
- Trigger on-demand and scheduled workflow execution.
82
+
- Manage and configure existing tasks to create workflows that are specific to your needs.
83
+
- Create up to 100 custom task extensions to be used in your workflows.
Using the Lifecycle Workflows feature requires an Azure AD Premium P2 license. For more information on this license, see [Compare generally available features of Azure AD](https://www.microsoft.com/security/business/identity-access-management/azure-ad-pricing).
0 commit comments