Disable Azure User through Microsoft Graph Powershell

Assuming you have your tenant configured / connected in Active Roles and all objects matched up with their Cloud equivalents, you don't have to resort to Graph for this.

Rather, you can just set the attribute edsaAzureUserAccountEnabled to FALSE and this will disable the Cloud object for you.

So my on-premises user (testuser@ad.local) has an extensionattribute1 (value: John.Doe@company@onmicrosoft.com) filled in. What I want is that during the deprovisioning of the account "testuser@ad.local) the cloud only account "John.Doe@company.onmicrosoft.com" gets disabled.

You need to make a Change Workflow that is configured with an OnDeprovision start condition, and contains an Update Activity that sets the edsaAzureUserAccountEnabled property of your testuser@ad.local (identified as the Workflow Target) to FALSE.

Assumption:  You have Active Roles admin service setup to communicate with your Office 365 tenant.

You need to make a Change Workflow that is configured with an OnDeprovision start condition, and contains an Update Activity that sets the edsaAzureUserAccountEnabled property of your testuser@ad.local (identified as the Workflow Target) to FALSE.

Assumption:  You have Active Roles admin service setup to communicate with your Office 365 tenant.

Second assumption:  Your testuser@ad.local user's edsvaAzureObjectId contains the GUID of your Office 365 object John.Doe@company.onmicrosoft.com

Hi,

Just to be sure but do you mean the Synchronization Service or Azure AD Configuration settings in the Configuration Center?

Azure AD Configuration settings in the Configuration Center