How to clean up unmanaged Microsoft Entra accounts?

Microsoft Entra user accounts created in unmanaged tenants or viral tenants will still have access after they leave your organization. It is important to clean up these accounts to ensure data security.

The steps below will help you clean up unmanaged Microsoft Entra accounts using the MSIdentityTools PowerShell module.

Run the following cmdlets:

• Install-Module Microsoft.Graph -Scope CurrentUser
• Install-Module MSIdentityTools
• Import-Module msidentitytools,microsoft.graph

To identify unmanaged Microsoft Entra accounts, run:

• Connect-MgGraph -Scope User.Read.All
• Get-MsIdUnmanagedExternalUser

To reset unmanaged Microsoft Entra account redemption status, run:

• Connect-MgGraph -Scopes User.ReadWriteAll
• Get-MsIdUnmanagedExternalUser | Reset-MsIdExternalUser

To delete unmanaged Microsoft Entra accounts, run:

• Connect-MgGraph -Scopes User.ReadWriteAll
• Get-MsIdUnmanagedExternalUser | Remove-MgUser

Manage Entra ID objects in bulk using M365 Manager Plus

M365 Manager Plus is an extensive Microsoft 365 tool used for reporting, managing, monitoring, auditing, and creating alerts for critical incidents. With M365 Manager Plus, you can:

• Perform bulk operations like password resets and account unlock without using PowerShell scripts.
• Report and audit with over 700 pre-packaged reports to track changes and get better visibility on your services.
• Automate routine tasks like user provisioning, stale group cleanup, and mailbox management operations.
• Monitor the health of Microsoft 365 services and get notified on critical activities and outages.
• Create custom granular roles to delegate Microsoft 365 administration to technicians.