7 Useful Remove-MgUser Scripts for Microsoft 365 Administrators

Managing user accounts is a critical responsibility for Microsoft 365 administrators. When employees leave or accounts are no longer needed, removing users properly is essential for security and license management.

The Remove-MgUser cmdlet allows you to delete users efficiently using Microsoft Graph PowerShell.

In this article, we’ll walk through 7 practical scripts — from simple deletions to safe and conditional removals.

Prerequisites

Connect to Microsoft Graph:

Connect-MgGraph -Scopes "User.ReadWrite.All"

Remove-MgUser Scripts

1. Remove a User by UPN

Remove-MgUser -UserId "john.doe@contoso.com"

👉 Use case:
Quickly delete a user using their email (UPN).

2. Remove a User by User ID

Remove-MgUser -UserId "12345abc-6789-def0-1234-56789abcdef0"

👉 Use case:
Useful when working with scripts or API outputs that return User IDs.

3. Remove a User with Confirmation

Remove-MgUser -UserId "jane.doe@contoso.com" -Confirm

👉 Use case:
Adds an extra safety prompt before deletion.



4. Preview User Removal (Safe Mode)

Remove-MgUser -UserId "jane.doe@contoso.com" -WhatIf

👉 Use case:
Simulate deletion without actually removing the user — highly recommended before bulk operations.



5. Bulk Remove Users from a CSV File

Sample CSV (Users.csv)

UserPrincipalName
user1@contoso.com
user2@contoso.com
user3@contoso.com

Script

$users = Import-Csv "C:\Path\To\Users.csv"

foreach ($user in $users) {    
  Remove-MgUser -UserId $user.UserPrincipalName 
}

👉 Use case:
Remove multiple users during offboarding or cleanup activities.

6. Remove a User Only If the Account Is Disabled

$user = Get-MgUser -UserId "john.doe@contoso.com" -Property "accountEnabled"

                                            if ($user.AccountEnabled -eq $false) {    
    Remove-MgUser -UserId $user.Id    
    Write-Host "User deleted successfully."
}
else {    
  Write-Host "User account is still enabled. Deletion skipped."
}

👉 Use case:
Ensure only inactive users are deleted — safer approach for automation.

7. Remove Users Created Before a Specific Date

$OldUsers = Get-MgUser -All -Filter "createdDateTime lt 2023-01-01T00:00:00Z"

foreach ($User in $OldUsers) {    
  Remove-MgUser -UserId $User.Id -Confirm
}

👉 Use case:
Clean up old or unused accounts based on creation date.

Tips for Using Remove-MgUser

• Always test scripts with -WhatIf before running in production.
• Use -Confirm for safer execution in bulk operations.
• Combine with Get-MgUser for conditional deletion logic.
• Ensure proper permissions (User.ReadWrite.All) are granted.

Common Error to Watch For

Error	Cause	solution
Insufficient privileges to complete the operation	Missing required permissions	Reconnect with appropriate scope: Connect-MgGraph -Scopes "User.ReadWrite.All"

Conclusion

The Remove-MgUser cmdlet is a powerful tool for managing user lifecycle in Microsoft 365. From simple deletions to bulk and conditional removals, it helps administrators maintain a clean and secure environment.

Always proceed with caution — especially when performing bulk operations — and make use of -WhatIf and -Confirm to avoid accidental deletions.