Customers & onboarding
Removing M365Assessments from a customer tenant
A tenant's administrator can revoke all access at any time by deleting the M365 Assessment enterprise applications. No ticket needed.
- Who can do this
- Customer's Global Administrator, Cloud Application Administrator or Application Administrator
- Plan
- All plans
- Time
- 2 minutes
Steps
Sign in to
entra.microsoft.comas a Global Administrator, Cloud Application Administrator or Application Administrator.Go to Enterprise applications and search for M365 Assessment. Each approved module appears separately (for example “M365 Assessment – Core”). Older connections show M365Assessments Collector; the wizard's sign-in app appears as “M365 Assessment – Onboarding”.
Open each app, select Properties, then Delete, and confirm. This removes the app's service principal, its consent and its role assignments (including Global Reader).
If the Power Platform module was approved, also remove its management-app registration:
Remove-PowerAppManagementApp -ApplicationId <application id>.
Good to know
Access ends immediately: M365Assessments can no longer get tokens for the tenant, so no further assessments can run. Stored reports are not deleted by this; the service provider deletes them by offboarding the customer.
What happens next
Service providers: offboard the customer in the portal to delete its stored assessments and reports (Offboarding a customer).
Last updated