Skip to content

Deleted Entra ID Users

The question it answers: Which users were deleted, when, and how many days are left to restore them?

Where in the appEntra ID › Users › Deleted Users
WorkloadEntra ID
KindTable
DataRead from Microsoft 365 when someone first opens it, then kept for the report cache lifetime (Settings > Data & cache, 1 hour unless changed).
LicenceNo extra licence needed.
Report id (API and MCP)entra.users.deleted
ColumnKeyType
Display NameDisplayNameText
User Principal NameUserPrincipalNameText
Account EnabledAccountEnabledYesNo
DeletedDeletedDateTimeDateTime
Days left to restoreDaysLeftToRestoreText

Licence: No extra licence needed.

Application permissions on the IntensiveReports app registration (all permissions):

PermissionAPIWhat it allowsNote
User.Read.AllMicrosoft GraphRead all users’ full profiles
Data sources it reads
  • GET /v1.0/directory/deletedItems/microsoft.graph.user
GET /ir-api/v1/reports/entra.users.deleted?size=100

An AI assistant reads it with the MCP tool get_report and the id entra.users.deleted. The client needs the Read grant for Entra ID. See Using the API.