Forum Discussion

Deleted's avatar
Deleted
Dec 21, 2021

Deactivate Inactive Guest Users last 3 months

Hi, I am looking for a quick and easy solution for deactivating all guest users in Azure AD that has not logged in to their account the last 3 months.    Appreciate all answers! Br,  
Azure Active Directory (AAD)
Deleted's avatar
Deleted
Jan 04, 2022
Excellent, thanks! So if I directly want to identify only guest users with a lastsignindatetime before a specified date (approx. 90 days) it will be like this?
https://graph.microsoft.com/beta/users?$filter=userType eq 'Guest'&$select=displayName,signInActivity/lastSignInDateTime le 2021-09-30T00:00:00Z

How can the output from Graph Explorer be extracted to a .csv file? We expect results of several thousands of users.
  • Deleted's avatar
    Deleted
    Jan 04, 2022
    Appreciate if anyone know the answers here, as we plan executing the deactivation of guest users tomorrow.
    Thanks!
    • VasilMichev's avatar
      VasilMichev
      MVP
      Jan 04, 2022
      No, there's no way to export via the Graph explorer, afaik, unless you want to do manual copy/paste. You can always use PowerShell to query the Graph though, and exporting there is easy. The "Microsoft Graph" package can help you as well, in case you don't want to issue web requests directly: https://docs.microsoft.com/en-us/graph/powershell/installation
      • Deleted's avatar
        Deleted
        Jan 04, 2022
        Alright, thanks again for all your replies! Then we have to go with powershell, with the Graph Powershell SDK - as I understand we can use the same query as in Graph Explorer.
        So if I directly want to identify only guest users with a lastsignindatetime before a specified date (approx. 90 days) it will be like this?
        https://graph.microsoft.com/beta/users?$filter=userType eq 'Guest'&$select=displayName,signInActivity/lastSignInDateTime le 2021-09-30T00:00:00Z