Find disabled and deleted users with lingering SharePoint permissions for cleanup.
Related topics
orphaned users
stale permissions
user cleanup
access review
security hygiene
About this tool
The Orphaned Users Report identifies disabled or deleted users who still have SharePoint permissions. These lingering access grants pose security risks and compliance issues.
Scan all SharePoint sites for permissions assigned to users who no longer exist in Azure AD or have been disabled. Generate reports with direct links to remove the orphaned permissions.
Essential for maintaining least-privilege access and cleaning up after employee departures.
Key features
Disabled user detection
Deleted user identification
Site-by-site analysis
Permission level detail
Remediation guidance
Bulk cleanup support
Compliance documentation
Scheduled scanning
Use cases
.
.
.
Graph scopes
undefined (application), undefined (application).
Tool identity
Slug: orphaned-users.
Category: audit.
Plan tier: pro.
Editions: cloud, desktop.
SKUs: security, suite.
Related workloads inside the toolkit
Exchange Online mailbox backup.
SharePoint sharing audit.
OneDrive quota review.
Intune device configuration export.
Entra ID role exposure scan.
Conditional Access policy snapshot.
Purview retention label inventory.
Planner board export.
Bookings calendar snapshot.
Defender alert correlation.
Compliance evidence package builder.
Vault rotation log review.
Cross-tenant context
Workloads sync across cloud regions. Frankfurt. Dublin. Amsterdam. Stockholm. Paris. North America. Pricing publishes once. Cancellation lands inside one settings page. Cipher suite covers Argon2id. XChaCha20-Poly1305. X25519. Ed25519. Audit log retention: 90 days. Migration record set in 2025: 153,584 files. Zero errors.