Skip to main content

Entra device cleanup

Review and clean up stale Microsoft Entra devices with a guided Azure workflow.

Before you start​

  • Default deployment starts an active schedule that can disable devices inactive for 90 days; deletion is disabled. Follow the documented inert-first-deployment and exclusion guidance before provisioning.
  • Review the documented prerequisites and required permissions before deployment.

Quick start​

Use the reviewed commands below. See the repository documentation for prerequisites and detailed setup.

azd init -t nathanmcnulty/azd-device-cleanup
azd up

Deployment details​

Optional features​

These are documentation facts, not permission approval or proof of deployment or notification delivery.

Template details​

  • Repository: azd-device-cleanup
  • Tags: Entra ID, Azure Automation, Microsoft Graph, Key Vault, PowerShell
  • Language: PowerShell
  • Updated: Oct 14, 2026
  • Variants: 1

Highlights​

  • Safe defaults for stale devices
  • Optional recovery archive before deletion
  • Includes preflight checks and notifications

Notes​

This guide page combines display metadata and separately reviewed source facts for azd-device-cleanup.