How to determine if the Application or Service Principal can be safely deleted in Entra ID?

EnterpriseArchitect 5,036 Reputation points
2024-02-15T10:08:22.84+00:00

Folks,

I require some assistance and explanation before deleting the App registrations or Enterprise applications based on the below indication:   Owners: empty.

Users and groups: empty.

Sign-in Logs: no activity in the past 30 days (maximum limit).

Audit logs: no activity in the past 30 days (maximum limit).

Provisioning logs: no activity in the past 30 days (maximum limit).

  Can we say the App registrations or Enterprise applications are not in use by any person or systems, hence it is safe to be deleted?

Any help would be highly appreciated.

Thanks,

Microsoft Identity Manager
Microsoft Identity Manager
A family of Microsoft products that manage a user's digital identity using identity synchronization, certificate management, and user provisioning.
648 questions
Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,252 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
175 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,353 questions
0 comments No comments
{count} votes

Accepted answer
  1. Michael Morten Sonne 580 Reputation points MVP
    2024-02-15T18:43:49.6233333+00:00

    Hi, Yes - based on that you write here, there is no activity on the App registrations and Enterprise applications. Under the Enterprise Applications, have to checked all logs here:

    • User sign-ins (interactive)
    • User sign-ins (non-interactive)
    • Service principal sign-ins
    • Managed identity sign-ins

    If still no logs, it should be safe to delete. Let me hear from you.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful