Cannot delete Microsoft Entra tenant - system enterprise applications blocking deletion

To delete the Microsoft Entra tenant when the checklist is blocked by Enterprise Applications but the portal shows none, remove or disable the remaining service principals by using Microsoft Graph PowerShell, then retry tenant deletion.

Follow these steps:

1. Install required PowerShell modules

      Install-Module Microsoft.Graph
      Install-Module -Name Az
   

2. Connect to the correct tenant with Microsoft Graph Use an admin account homed in the tenant being deleted (not a guest):

      Connect-MgGraph -Scopes "Application.ReadWrite.All"
   

   Run this to confirm the tenant context:

      Get-MgDomain
   

   Verify the tenant ID and onmicrosoft.com domain match the tenant to be deleted.
3. Confirm Az context to avoid affecting the wrong tenant

      Clear-AzContext -Scope CurrentUser
      Connect-AzAccount -Tenant <object id of the tenant you are attempting to delete>
      Get-AzContext
   

   Ensure the tenant information matches the tenant you want to remove.
4. Remove service principals (enterprise applications) Run the following command. Execute it multiple times until no more removable service principals remain, because some deletions can fail on first attempt due to dependencies:

      Get-MgServicePrincipal -All | ForEach-Object { Remove-MgServicePrincipal -ServicePrincipalId $_.Id }
   

5. If some service principals cannot be deleted, disable them and retry For service principals that are not removable but are blocking deletion, first disable them, then attempt removal again:

      $ServicePrincipalUpdate = @{ "accountEnabled" = "false" }
      
      Get-MgServicePrincipal -All | ForEach-Object { 
          Update-MgServicePrincipal -ServicePrincipalId $_.Id -BodyParameter $ServicePrincipalUpdate 
      }
      Get-MgServicePrincipal -All | ForEach-Object { 
          Remove-MgServicePrincipal -ServicePrincipalId $_.Id 
      }
   

6. Retry tenant deletion
   1. Sign in to the Microsoft Entra admin center as a Global Administrator.
   2. Go to Microsoft Entra ID → Overview → Manage tenants.
   3. Select the tenant and choose Delete.
   4. If all checks (including Enterprise Applications) are now green, complete the deletion.

If any Microsoft-owned service principals still cannot be removed, they may not block deletion after being disabled; re-run the deletion check in the portal after the steps above.

References:

• Delete a tenant in Microsoft Entra ID
• Can't delete a directory through the Azure Management Portal
• Close your Microsoft business account