Identity Protection-Risky Users error when attempting to dismiss user

DSC 0 Reputation points
2024-04-01T21:46:07.18+00:00

Hello, I have a user in my Identity Protection>Risky Users that has been there for several months. This user was deleted a long time ago, and therefore I do not understand why this user is in the Risky user section? When I try to dismiss the user, the error appears "Unable to initiate user risk dismissal. Failed to initiate the process of dismissing risk for the user Isabela Garcia. Please try again in a few minutes."

I have tried this many time over the past few months, but the user cannot be deleted, is there any way to remove this user?

Microsoft Identity Manager
Microsoft Identity Manager
A family of Microsoft products that manage a user's digital identity using identity synchronization, certificate management, and user provisioning.
616 questions
Azure Information Protection
Azure Information Protection
An Azure service that is used to control and help secure email, documents, and sensitive data that are shared outside the company.
517 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
6,901 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,555 questions
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Andy David - MVP 142.2K Reputation points MVP
    2024-04-01T22:11:11.35+00:00

    You may want to open a ticket with Azure support. Sounds like an orphaned object.

    1 person found this answer helpful.
    0 comments No comments

  2. Marilee Turscak-MSFT 33,951 Reputation points Microsoft Employee
    2024-04-02T00:13:30.0233333+00:00

    Hi @DSC ,

    I agree with what @Andy David - MVP advised.

    To add more context, the issue you described represents a known issue for which the solution is to raise a support ticket and incident.

    The portal team is currently working on a fix to enable deletion of risk data for these users from the UI.

    If you would like a one-time free support ticket raised to address this issue, please feel free to reach out to me at AzCommmunity@microsoft.com ("Attn: Marilee Turscak") and include the following information:

    1. Subscription ID
    2. Brief description of the issue
    3. Tenant ID: 
    4. Tenant Region: is the tenant in EU?
    5. Object IDs of the deleted users to delete their risk data (User object Ids can be found the risky users report): 
    6. UPN of person making the request: 
    0 comments No comments

  3. Pabitra Kumar Sikdar 80 Reputation points Microsoft Employee
    2024-05-01T05:00:42.4033333+00:00

    Hi @DSC

    It seems like you are having trouble dismissing a user from the Risky Users section in Azure AD Identity Protection. If the user has been deleted from the directory, it is not possible for administrators to dismiss risk for that user. In this case, you will need to open a Microsoft support case to remove the deleted user. Regarding the error message you received, "Unable to initiate user risk dismissal. Failed to initiate the process of dismissing risk for the user", it could be due to a temporary issue with the service. I recommend waiting a few minutes and trying again. If the issue persists, you can try clearing your browser cache or using a different browser. I hope this helps! Let me know if you have any other questions.

    0 comments No comments