Unable to delete Entra app

Amit Modi 40 Reputation points Microsoft Employee
2026-06-10T06:39:46.2333333+00:00

Unable to delete Entra app even though i am the owner of it

Microsoft Security | Microsoft Entra | Microsoft Entra ID

1 answer

Sort by: Oldest
  1. AI answer

    2026-06-10T06:40:00.3333333+00:00

    There are a few common reasons why an Entra application cannot be deleted even if listed as owner.

    1. Check required role and location of the object
    • For Enterprise applications (service principals), the Delete button is disabled unless the account has one of these roles or is the service principal owner:
      • Global Administrator
      • Cloud Application Administrator
      • Application Administrator
      • Owner of the service principal
    • If the app is a Microsoft application, it cannot be deleted from the UI regardless of role.
    • If the service principal is for a managed identity, it cannot be deleted from Enterprise applications; it must be managed from the corresponding Azure resource instead.
    1. Delete the enterprise application (service principal) If the app is an enterprise application added to the tenant and the account has the required role:

    Using Entra admin center:

    1. Sign in to https://entra.microsoft.com as at least Cloud Application Administrator.
    2. Go to Entra IDEnterprise apps | All applications.
    3. Search and select the application.
    4. Under Manage, select Properties.
    5. At the top of the Properties pane, select Delete, then confirm.

    Using Microsoft Graph PowerShell:

    1. Connect with the right scope:
         Connect-MgGraph -Scopes 'Application.ReadWrite.All'
      
    2. List service principals and find the one to delete:
         Get-MgServicePrincipal
      
    3. Delete it:
         Remove-MgServicePrincipal -ServicePrincipalId 'aaaaaaaa-bbbb-cccc-1111-222222222222'
      

    Using Microsoft Entra PowerShell:

    1. Connect:
         Connect-Entra -Scopes 'Application.ReadWrite.All'
      
    2. Get and delete by display name:
         Get-EntraServicePrincipal -Filter "displayName eq 'Test-app1'" | Remove-EntraServicePrincipal
      
    3. Delete the application object (not just the service principal) If the issue is with the application object itself, use Remove-EntraApplication with the ApplicationId:
    Remove-EntraApplication -ApplicationId <application-id>
    
    1. Behavior after deletion
    • After deletion, the enterprise application stays in the recycle bin for 30 days and can be restored during that period.
    • After 30 days it is hard-deleted automatically.
    1. If delete is still disabled
    • Confirm the app is not a Microsoft first‑party app.
    • Confirm it is not a managed identity service principal.
    • Confirm the signed-in account has one of the required roles above, not just “owner” of some related resource.
    • If all conditions are met and the button is still disabled, follow the guidance under Unable to delete an application in the troubleshooting article.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.