question

onetech-it avatar image
0 Votes"
onetech-it asked JamesTran-MSFT commented

Simple way, either via GUI or PowerShell, to identify "stale" or unused Azure AD Guest accounts?

Is there a simple method for identify Azure AD Guest accounts that haven't been used or accessed in XX number of weeks/months?

azure-ad-graphazure-ad-identity-governance
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

michev avatar image
1 Vote"
michev answered JamesTran-MSFT commented

Not sure if it meets your criteria of "simple", but you can use the Graph API to get each user's signInActivity property. You can use this to create a report, or filter based on specific timeframe (see example 5 here: https://docs.microsoft.com/en-us/graph/api/user-list?view=graph-rest-beta&tabs=http#example-5-list-the-last-sign-in-time-of-users-in-a-specific-time-range)

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@onetech-it
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.


Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

0 Votes 0 ·