Power Automate workflow · PDF & documents

Auto-protect and watermark PDFs before they leave the organisation

Files placed in an 'External' folder are watermarked 'Confidential – <recipient>', password-protected and shared with an expiring link.

TriggerSharePoint — When a file is created in a folder (folder: External/Outbox)
ConnectorsSharePoint · Adobe PDF Services · Office 365 Outlook
CategoryPDF & documents

The problem

Confidential PDFs are emailed unprotected and forwarded indefinitely.

The outcome

Every external copy is traceable to the recipient, protected and time-limited.

Before you start

  • A Recipient column on the library.

Build it step by step

  1. Get the file — Read file content and the recipient metadata.
  2. Watermark — Stamp a diagonal text watermark with the recipient name and date (Adobe PDF Services or Acrobat Pro Action Wizard for desktop teams).
  3. Protect — Protect PDF with an open password and disallow editing and copying.
  4. Share with expiry — Create sharing link for a file or folder with type View and an expiration date.
    Expression / setting
    addDays(utcNow(), 14, 'yyyy-MM-dd')
  5. Notify — Email the recipient the link; send the password via a separate channel.

Connector action names are shown as they appear in Power Automate at the time of writing; Microsoft and Adobe occasionally rename actions or add new versions.

Error handling

  • Organisation-wide sharing policies may block anonymous links — use 'specific people' links in that case.

Licensing

  • Adobe PDF Services per transaction; standard Microsoft connectors.

Variations

  • Apply a Microsoft Purview sensitivity label instead of a password where recipients are in trusted tenants.

Common in: Legal · Banking · GLCs