Remediating
From Azure Portalβ
- From Azure Home select the Portal Menu.
- Select
Microsoft Entra ID
. - Under
Manage
, selectUsers
. - Click on
Add filter
. - Select
User type
. - Select
Guest
from the Value dropdown. - Click
Apply
. - Check the box next to all
Guest
users that are no longer required or are inactive. - Click
Delete
. - Click
OK
.
From Azure CLIβ
Before deleting the user, set it to inactive using the ID from the Audit Procedure to determine if there are any dependent systems:
az ad user update --id <exampleaccountid@domain.com> --account-enabled {false}
After determining that there are no dependent systems delete the user:
Remove-AzureADUser -ObjectId <exampleaccountid@domain.com>
From Azure PowerShellβ
Before deleting the user, set it to inactive using the ID from the Audit Procedure to determine if there are any dependent systems:
Set-AzureADUser -ObjectId "<exampleaccountid@domain.com>" -AccountEnabled false
After determining that there are no dependent systems delete the user:
PS C:\>Remove-AzureADUser -ObjectId <exampleaccountid@domain.com>