I have a use case for a client where Azure AD accounts are created for 3rd parties who need access to the tenant. These users need to be check on a regular basis to make sure they are still in use.
I have recommended that they use Azure AD Access Reviews on a reoccuring basis to manage this.
The users are already in a specific security group that manages their Office 365 licence configuration.
The Access review is set up on this security group so if a user is declined as part of the review process they are removed from the security group so by default they lose their Office 365 licence.
However their account still remains as unlicenced. So an admin would have to manually remove the account at the end. Or create a script to delete.
Is there any way of also deleting their account as part of the Access review so it is just one process? In the Microsoft docs it seems to infer that you can. See details below.
https://docs.microsoft.com/en-gb/azure/active-directory/governance/complete-access-review
'Remove users from an access review
By default, a deleted user will remain deleted in Azure AD for 30 days, during which time they can be restored by an administrator if necessary. After 30 days, that user is permanently deleted. In addition, using the Azure Active Directory portal, a Global Administrator can explicitly permanently delete a recently deleted user before that time period is reached. One a user has been permanently deleted, subsequently data about that user will be removed from active access reviews. Audit information about deleted users remains in the audit log.'
Any help appreciated.
