An API that connects multiple Microsoft services, enabling data access and automation across platforms
Guest User Lifecycle Automation without Power Automate HTTP Action (Entra ID P1 + Microsoft 365 Business Standard)
Hi everyone,
I'm looking to automate our Guest User Lifecycle Management process using a PowerShell script with Microsoft Graph. The script identifies inactive guest users, pending invitations, generates reports, and can remove inactive guest users.
Our environment:
- Microsoft Entra ID P1
- Microsoft 365 Business Standard
- No Azure subscription
- No Power Automate Premium
I would like to automate this without relying on a user account or a user's workstation. Is running the script on a company server with a Microsoft Graph app registration the recommended approach, or is there a better Microsoft-supported solution under these licensing constraints?
Additionally, if the script performs guest user deletion using Microsoft Graph application permissions, does the app or service account require a specific Microsoft Entra administrative role (e.g., User Administrator or Privileged Authentication Administrator) to delete guest users?
Any recommendations or best practices would be greatly appreciated. Thank you!