How do I ensure that an App Registration is not used before I delete it?

Question

Maybe I am blind and can't see the option in the Azure Portal.

I'm working on a cloud application which has had many developers working on it. I want to clean up unused resources to help clarify the components we need to maintain.

I have found a few App Registrations which I do not think are being used - how do I verify that this is the case?

Answer 1

There is a good guide here that uses Vasil Michev's Powershell script to generate a CSV file of applications in the Azure Portal, and then goes through using a list of criteria for removing the apps (test apps, apps that haven't been granted permissions in years, etc).

You can also use this sample Powershell script to query App Registrations with expiring secrets and certificates, along with this Github solution that provides a dashboard of expired and expiring service principals.

There isn't really a single criteria for determining this, as apps can be used in different ways.