Microsoft Power Automate
Microsoft Power Automate is a general-purpose automated agent operated by Microsoft Corporation. The behavior depends entirely on what it is configured to do, so the right response depends on the request pattern, not the user-agent string alone.
Watch what it actually does on your site for a few hours before deciding whether to allow, rate-limit, or block.
If you cannot identify the operator and the traffic is meaningful, treat it as you would any unknown bot: rate-limit, observe, and only block if it misbehaves.
See Microsoft Power Automate on your own site
Match the User-Agent header on incoming requests against the pattern below.
regex
For higher confidence, also verify the source IP against the operator's published ranges. UA strings can be spoofed; IP ownership is harder to fake.
Renders JavaScript
No
IP verification
User-Agent only
Crawl frequency
Variable
Honors robots.txt
Yes
Honors Crawl-delay
Varies
Should I let Microsoft Power Automate through?
Watch your logs for a week first. Behavior varies wildly. Observe the request pattern before allow/block decisions.
Does blocking Microsoft Power Automate affect my Google rankings?
No. Microsoft Power Automate is not a search-engine crawler. Your ranking on Google or Bing is unaffected by what you do here.
How do I confirm a request is really from Microsoft Power Automate?
Look at the User-Agent header in your access logs and match it against the strings listed above. Worth knowing that the User-Agent is easy to fake, so this check tells you "the traffic claims to be Microsoft Power Automate", not "the traffic is genuinely Microsoft Power Automate". If you need stronger guarantees, look for a reverse-DNS check or wait for Microsoft Corporation to publish IP ranges.
What's the best way to understand what Microsoft Power Automate is doing on my site?
Look at which URLs it hits, how often, and what time of day. The request pattern usually tells you whether it's building an index, watching for a specific change, or trying to pull data in bulk. The User-Agent name alone rarely tells the full story.
What's the cleanest way to control Microsoft Power Automate?
Two layers. Robots.txt for the polite crawlers that read it, and rules at your CDN or edge for the ones that don't. Rankly's Agent Experience handles both from a single config, so you can allow, block, rate-limit, or serve a stripped-down version per bot. Agent Analytics handles the observation half so you know which bots are actually worth a rule.