1 min read
Power Automate and OAuth app sprawl
Citizen automation is great until a forgotten flow holds privileged consent.
Low-code flows often request broad Graph permissions.
Hygiene
- Review enterprise app consents quarterly
- Disable flows owned by departed users
- Prefer least-privilege connectors
We include OAuth reviews in Microsoft 365 tune-ups. Reach out.