Microsoft Graph Webhook for /users does not trigger for changeType=created but works with created,updated

Question

I’m working with Microsoft Graph change notifications to track user creation events and trigger an Azure Logic App.

Scenario

I created a subscription on /users with the following configuration:

{
  "changeType": "created",
  "notificationUrl": "<Logic App URL>",
  "resource": "/users",
  "expirationDateTime": "<valid future time>",
  "clientState": "secretClientValue"
}

The subscription is created successfully (HTTP 201), and the validation handshake works correctly -my Logic App receives and returns the validation token.

---

Issue

When I create a user:

• From Microsoft Graph API (POST /users)
• From Azure Portal (Entra ID)

The Logic App does NOT receive any notification when changeType is set to only "created".

---

Observation

If I update the subscription to:

"changeType": "created,updated"

Then the Logic App starts receiving notifications.

---

Questions

1. Is this expected behavior that "created" alone may not trigger notifications for /users?
2. Are user creation events internally treated as "updated" events in some scenarios?
3. Is it recommended to always include "updated" when subscribing to /users?
4. Are there any documented limitations regarding user creation events from Azure Portal vs Graph API?

---

Additional Details

• Using Microsoft Graph v1.0
• Subscription validation works correctly
• Logic App responds within required time
• Proper permissions are granted (Directory.Read.All)
• Same tenant is used for subscription and user creation

---

Expected Behavior

Notifications should be triggered when a user is created with "changeType": "created".

---

Any clarification or official guidance would be very helpful.

Thanks in advance!

Answer 1

Hello 43091962,

Your setup looks correct. This behavior is expected for /users.

From the documentation:

Creation and soft deletion of users also trigger the updated changeType. Reference: https://learn.microsoft.com/en-us/graph/change-notifications-overview#supported-resources

When a user is created, the system usually performs a few additional updates right after. Because of that, Graph often sends only an updated notification, and created may not come separately.

So "changeType": "created" may not trigger, while "changeType": "created,updated" works.

This is expected behavior. Creation can show up as an updated event, so it’s recommended to include updated when subscribing to /users. There’s no real difference between creating users via Graph API or the Portal in this case.

You can continue with:

"changeType": "created,updated"

Then fetch the user (GET /users/{id}) and use createdDateTime to identify newly created users.