英文:
What happens to Azure AD guest account in the guest tenant when the account in home tenant gets deleted?
问题
- 当我从AD中删除帐户时会发生什么？它会在AAD中被禁用（仍在“home”租户中），还是我必须手动从AAD中删除？
- 那么另一个租户中的访客帐户会发生什么情况？我希望如果主要的AAD帐户被删除，那么另一个租户中的访客帐户也会自动被删除。
非常感谢任何指导。
英文:
I have one windows server with its AD synced to Azure AD with AD connect, the users are using O365.
Some accounts in this tenant are then invited to another tenant as guest accounts.
- What happens, when I delete the account from AD? Does it gets disabled in AAD (stil in the "home" tenant") or do I have remove from AAD manually?
- And what happens to the guest account in the other tenant? I'd like to think, that if the primary AAD accounts gets deleted, then the guest account in another tenant also gets deleted automatically.
Many thanks for any pointers
答案1
得分: 1
当您删除一个通过Azure AD Connect同步到Azure AD（AAD）的本地AD帐户时：
-
在下一次同步周期期间，Azure AD中对应的帐户也会被删除（软删除）。它不会被禁用，而是被移除。这并不意味着帐户会立即从AAD中删除。它会进入“软删除”状态，在此期间您有30天的时间来恢复用户帐户。在这30天期限之后，它将被永久删除。
-
当原始的Azure AD帐户被删除时，另一个Azure AD租户中的访客帐户不会自动删除。如果原始帐户不再可访问，外部目录中的访客帐户状态可能会设置为“外部 - 用户帐户已禁用”。然而，该帐户本身会一直保留，直到在该租户中由管理员手动删除。
访客帐户（B2B）实质上是对原始Azure AD帐户的引用或指针，虽然它们的某些状态可能与原始帐户相关联，但它们的生命周期并不紧密耦合。换句话说，删除原始帐户不会自动删除访客帐户。
英文:
When you delete an on-premises AD account that is synced to Azure AD (AAD) via Azure AD Connect:
-
The corresponding account in Azure AD will also be deleted (soft delete) during the next synchronization cycle. It doesn't get disabled; it gets removed. This doesn't mean the account gets deleted immediately from AAD. It goes into a "soft delete" state, where you have a 30-day period during which you can restore the user account. After this 30-day period, it is permanently deleted.
-
The guest account in another Azure AD tenant doesn't get deleted automatically when the original Azure AD account gets deleted. The guest account's status in the external directory might be set to "External - User account disabled" if the original account is no longer accessible. However, the account itself will remain until manually removed by an administrator in that tenant.
Guest accounts (B2B) are essentially references or pointers back to the original Azure AD account, and while certain aspects of their state may be linked to the original account, their lifecycle isn't tightly coupled. That is, deleting the original account won't auto-delete the guest account.
通过集体智慧和协作来改善编程学习和解决问题的方式。致力于成为全球开发者共同参与的知识库，让每个人都能够通过互相帮助和分享经验来进步。
评论