Forum Discussion

Copper Contributor

Aug 16, 2018

Hybrid Deployment - Automate User Deletion - Remove-MSOLUser

We are currently working on a workflow that will restore an MSOL user and assign permissions to OneDrive and Exchange Online. This piece is worked out, converting to cloud only object. The snag ...

Azure Active Directory (AAD)

Identity Management

Kohen Dubeau

Copper Contributor

Aug 21, 2018

Nestori Syynimaa Thank you. I'm familiar with the process to restore and set the various permissions needed. The problem we are trying to solve for is if a manager request to have access for more than 30 days. Is there an value we can modify and a workflow mark the user for deletion? We are trying to avoid using another custom attribute.

Could we possibly use the "SoftDeletedTimeStamp"? Update this to the date we would like the account to be removed. If there is no built in workflow, I can accept that as a take away.

Nestori Syynimaa

MVP

Aug 21, 2018

Sorry Kohen Dubeau, you can't set the SoftDeletedTimeStamp manually. So, you either have to keep the license for a longer period, or use retention policies for the data. You can also check my blog post about using inactive mail boxes.