2025-11-23

Service Accounts vs App Registrations for Power Automate Email

Your Power Automate email flows aren’t clever automations, they’re HR risk wrapped in HTML. You wire a flow to a “service account,” fight through MFA once, get it working, and decide it’s done. It’s not done. It’s brittle, over-privileged, impossible to audit cleanly, and the first time conditional access or a password policy changes, it dies loudly or, worse, half-silently. A service account is still a user. Delegated auth, MFA prompts, password expiry, CA tweaks – all the stuff meant for humans – now sits in front of a robot that can’t tap “Approve” at 2:14 a.m. Tokens expire, flows wake up, find nothing valid, and either fail or thrash until they send duplicates like a jammed label maker. To “fix” that, people hand it Send As, then another exception, then a shared mailbox that never gets revoked. Over time your “one sender” is an impersonation cannon that can send as almost anyone. No

Apple Podcasts · Spotify · YouTube · YouTube Music

Service Accounts vs App Registrations for Power Automate Email (English)