Deprovision user remove Azure and M365 roles

Question

Hello All, is is possible via Adaxes deprovisioning to remove all his Azure and M365 roles besides custom Powershell script?

Regards Ivaylo

Comments

@ivaylo.valkov

This should be possible but only if you use groups to manage your role and license assignments. Otherwise you will need to use custom Powershell.

In Azure AD, you can have groups assigned to role assignments or licenses. Then during a deprovision use Adaxes to remove the user from the group, and thus removed from the role or license assignment.

---

This is what I though so I changed the roles assignment from direct to group based.

Thank you!

Answer 1

Hello Ivaylo,

Unfortunately, there is no such possibility. That is something you can only do using a script. The following article by Microsoft should be helpful: https://learn.microsoft.com/en-us/powershell/module/azuread/remove-azureaddirectoryrolemember?view=azureadps-2.0.