microsoft power automate desktop license

Important: Setting the allow-list will ignore the AllowTenantSwitching and AllowRegisteringOutsideOfAADJoinedTenant settings described below. We recommend that you define a list of allowed tenants and add them to the registry as seen in the Allowing specific tenants section. How to register your machine to a different tenant? Initial machine registration does not require admin privileges but changing the registration restrictions does. You can use the new tenant restriction settings to control which tenants are allowed to run Power Automate desktop scripts on your machines. These restrictions make it harder for malicious actors on already compromised machines to use Power Automate Desktop to amplify the problem by commanding and controlling a machine over the network. What are the goals of these restrictions? Machines can also be configured to allow non-admins to perform these operations, as explained below. Registering an AAD-joined machine to a tenant different from its AAD-joined tenant. Starting with Power Automate desktop version 2.24, the following requires administrative privileges:Ĭhanging the tenant that a machine is registered to.

Tenant restrictions for Power Automate desktop machine registration

Microsoft power automate desktop license