MC806103 – (Updated) Microsoft SharePoint: “Remove-SPOExternalUser” retires starting July 29, 2024 (archived)

Product:

Entra, Microsoft Graph, SharePoint

Platform:

Developer, Online, World tenant

Status:

Change type:

Admin impact, Retirement, Updated message

Links:

Details:

Summary:
The "Remove-SPOExternalUser" PowerShell cmdlet for SharePoint Online will retire on July 29, 2024. Users should transition to the "Remove-AzureADUser" cmdlet and update workflows to avoid disruption. Further details and guidance are available at Microsoft Learn.

Details:
Updated July 5, 2024: We have updated the content below with additional information. Thank you for your patience.
Starting July 29, 2024, and ending August 9, 2024, we will be retiring the Remove-SPOExternalUser PowerShell cmdlet for Microsoft SharePoint Online (SPO) users as part of our ongoing efforts to enhance security and streamline scope and permissions for external users.
After the retirement, requests using the Remove-SPOExternalUser cmdlet will be blocked with an error message similar to:
"To streamline scope and permissions for external users, enhance access management, and strengthen our security posture, this cmdlet has been deprecated. Alternatively, please use the Remove-MgUser cmdlet in Microsoft Graph PowerShell for user management. Learn more: Remove-MgUser (Microsoft.Graph.Users) | Microsoft Learn."

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2024-06-28

updated:
2024-08-10

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

Direct effects for Operations**

- Impact on IT Operations
- Transitioning from "Remove-SPOExternalUser" to "Remove-MgUser" requires updates to existing scripts and automation processes.
- Role Impacted: IT Administrators
- Dependency: Any automated workflows or scripts that currently utilize the "Remove-SPOExternalUser" cmdlet will need to be identified and modified to prevent disruptions.

- Impact on IT Services
- Potential service interruptions if workflows using the deprecated cmdlet are not updated before the retirement date.
- Role Impacted: Service Managers
- Interdependency: Services relying on user management in SharePoint Online may experience issues if not transitioned properly.

- Impact on IT Users
- Users may face delays in user management processes if the transition is not managed effectively, leading to potential access issues for external users.
- Role Impacted: End Users (especially those interacting with external collaborators)
- Dependency: User access management processes that rely on the cmdlet for removing external users.

- Impact on IT Security
- The change aims to enhance security; however, if not implemented correctly, it could lead to security vulnerabilities during the transition period.
- Role Impacted: Security Officers
- Interdependency: Security protocols that depend on user management practices may need to be reviewed and updated.

- Impact on Compliance and Governance
- Organizations must ensure compliance with data governance policies during the transition, as improper handling of external user permissions could lead to compliance issues.
- Role Impacted: Compliance Officers
- Dependency: Compliance frameworks that require accurate user management and documentation of external user access.

References:
- Microsoft Learn: [Remove-MgUser (Microsoft.Graph.Users)](https://learn.microsoft.com/powershell/module/microsoft.graph.users/remove-mguser?view=graph-powershell-1.0)
- Microsoft Learn: [Remove Users in SharePoint](https://learn.microsoft.com/en-us/sharepoint/remove-users)

Opportunities**

- Transition to Microsoft Graph PowerShell
- Opportunity to streamline user management processes by transitioning from the deprecated "Remove-SPOExternalUser" cmdlet to the "Remove-MgUser" cmdlet.
- Roles benefiting: IT Administrators, Security Teams.
- Reference: [Microsoft Learn - Remove-MgUser](https://learn.microsoft.com/powershell/module/microsoft.graph.users/remove-mguser?view=graph-powershell-1.0)

- Update Workflows and Automation
- Review and update existing workflows that utilize the "Remove-SPOExternalUser" cmdlet to ensure continuity of operations and avoid disruptions.
- Roles benefiting: Business Analysts, IT Operations Teams.
- Reference: [Troubleshoot user profile removal issues](https://learn.microsoft.com/en-us/sharepoint/remove-users)

- Enhance Security Posture
- Leverage the transition to Microsoft Graph to implement more robust security measures for managing external users, aligning with the organization's security policies.
- Roles benefiting: Security Teams, Compliance Officers.
- Reference: [Microsoft Security Best Practices](https://www.microsoft.com/security/blog/)

- Training and Knowledge Sharing
- Conduct training sessions for IT staff and relevant stakeholders on the new cmdlet and its implications to ensure smooth adoption and minimize operational risks.
- Roles benefiting: IT Support Teams, Training Coordinators.
- Reference: [Microsoft Learn - PowerShell Training](https://learn.microsoft.com/en-us/powershell/scripting/learn/overview?view=powershell-7.2)

- Monitor and Optimize Licensing Costs
- Evaluate the current licensing model for SharePoint and Microsoft Graph to identify potential cost-saving opportunities while ensuring compliance with the new cmdlet requirements.
- Roles benefiting: IT Finance Teams, Procurement Officers.
- Reference: [Microsoft Licensing Overview](https://www.microsoft.com/en-us/licensing/default)

Potentional Risks**

XXXXXXX ... paid membership only