
JakeR.78774 (Customer) asked a question.
I'm working on upgrading the process for a legal/litigation hold so if needed, an admin can update a field in an account's profile, which triggers them being added to a different Active Directory pushed group to move them into a new OU.
That part works perfect, what I'm trying to figure out is how to apply the hold in O365 programmatically via a workflow that would see the user added to the Okta Group "legal hold" and then tell O365 to apply the legal hold policy to the account.
Any help greatly appreciated. Thanks!

@JakeR.78774 (Customer) -- This really comes down to "Is there an endpoint to perform the action in graph". And if there is an endpoint can you gain auth to perform actions against it.
If the answer is yes. Based on what you described above that could be an event triggered flow (User Profile Updated) that checks to see if that specific attribute is updated to a value that designates a "hold" then makes a call to O365.
Alternatively, you might be able to achieve it a bit differently. What I did find was this:
https://learn.microsoft.com/en-us/purview/ediscovery-create-a-litigation-hold
Which looks to use Powershell. Is there a way to kick off a powershell script on users moved to that new OU? That seems like it would also achieve the same goal.