Risky sign in detection for deleted user account

R Kendrick 0 Reputation points
2024-10-16T08:47:56.6366667+00:00

We have a user with a risky sign in associated with the account but the user account was deleted from the system over 5 years ago, when we try to dismiss the notification we are getting the error message "Unable to initiate user risk dismissal". Looking for some help with how to remove the notification as the account no longer exists.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
24,273 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Goutam Pratti 4,015 Reputation points Microsoft External Staff
    2024-10-16T19:10:51.9833333+00:00

    Hi @R Kendrick ,

    Thank you for reaching out to Microsoft Q&A.

    I understand that you are unable to dismiss the risk for a user who was deleted over five years ago. This scenario is addressed in the Microsoft documentation: Remediate risks and unblock users in Microsoft Entra ID Protection - Microsoft Entra ID Protection | Microsoft Learn.

    User's image

    Hope this helps. Do let us know if you any further queries.


    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

    Best regards, 

    Goutam Pratti


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.