You can delete an Azure guest user in the selected Azure tenant with the Delete option of the Active Roles Web Interface. This is typically performed if the guest user no longer works for the organization.
Note: You can only remove certain Azure guest users (for example, Global Administrators) if you have sufficient administrator roles. For more information on these role requirements, see the official Microsoft documentation.
Attempting to delete an Azure guest user without sufficient administrative privileges will result in failure, and the following error log message appearing in the Windows Event Log:
Post-processing operation on object caused a policy violation.
To delete an Azure guest user
-
Navigate to Directory Management > Tree > Azure > <azure-tenant-name> > Azure Guest Users.
The list of Azure guest users of the selected tenant is displayed.
Figure 50: Directory Management > Tree View > Azure > <azure-tenant-name> > Azure Guest Users — Listing the Azure guest users in the tenant
-
Select the Azure guest user that you want to delete.
-
Click Delete.
-
To confirm the removal of the guest user, click Yes.
You can configure and view the Azure group membership(s) of an Azure guest user with the Azure Member Of option of the Active Roles Web Interface. Using this option, you can:
To add or remove an existing Azure guest user to or from an O365 Group
-
Navigate to Directory Management > Tree > Azure > <azure-tenant-name> > Azure Guest Users.
The list of Azure guest users of the selected tenant is displayed.
Figure 51: Directory Management > Tree View > Azure > <azure-tenant-name> > Azure Guest Users — Listing the Azure guest users in the tenant
-
In the middle pane, select the Azure guest user whose membership you want to view or configure.
-
In the right pane, click Azure Member Of. The list of Azure O365 groups where the guest user has a membership then appears.
Figure 52: Directory Management > Tree View > Azure > <azure-tenant> > Azure Guest Users > Azure Member Of – Listing the Azure groups of the selected Azure Guest user
-
To add the Azure guest user to a new Azure O365 group of the Azure tenant, click Add.
-
In the Select Object page, select the O365 Group(s) you want the Azure guest user to be a member of, then click OK to apply your changes and return to the Azure Member Of page. The list is then updated with the new groups that you selected previously.
-
To remove the Azure guest user from any O365 Group(s), select the group(s) in the Azure Member Of page, and then click Remove. Click OK to confirm the removal from the group.
You can view the change history of an Azure guest user in the selected Azure tenant with the Change History option of the Active Roles Web Interface.
To view the change history of an Azure guest user
-
Navigate to Directory Management > Tree > Azure > <azure-tenant-name> > Azure Guest Users.
The list of Azure guest users of the selected tenant is displayed.
Figure 53: Directory Management > Tree View > Azure > <azure-tenant-name> > Azure Guest Users — Listing the Azure guest users in the tenant
-
Select the Azure guest user whose change history you want to check.
-
Click Change History.
The change history of the Azure guest user then appears.
Figure 54: Directory Management > Tree View > Azure > <azure-tenant> > Azure Guest Users > Change History – Viewing the change history of the selected Azure guest user
Active Roles provides the facility to perform administrative tasks such as create, read, update, and delete Azure contact on cloud through web interface. You can also perform other operations such as viewing and modifying the Azure cloud-only contact, view change history, and other operations related to Azure cloud-only contacts.
NOTE: When creating a new cloud-only Azure contact or updating an existing one, it may take up to 15 minutes for the changes to appear on the Active Roles Web Interface. This is due to a replication delay present between PowerShell and the Microsoft Graph API.
