Saturday, November 16, 2019

External Azure Active Directory

In Azure, I have invited some external users via their corporate email addresses and they are now visible in our AAD, the source being listed as External Azure Active Directory. I do not know if they had to create a new password when they clicked the link in the email invitation.
My question is this: If we add one of these external users to security groups or apps in Azure and they later on leave their job (and have their email accounts closed), will their access to whatever we have granted them access to be terminated as well?
In other words: Are external accounts in AAD dependant on them being active in their own ADs, or are they merely copied to Azure AD upon invitation (our users' full names as they appear in their email accounts' name field are automatically shown in the same way in our Azure AD) and thus active until we actively remove them or restrict their access?

No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...