This script is designed to run in an Azure Automation account and be triggered by a Logic App. It uses the System Assigned Managed Identity of the Automation Account to authenticate to Azure. The script removes Elevated Access in Entra by removing the User Access Administrator role assignment at the root scope ("/") for the specified user. The scr... More info