Remove-MgApplication

What is Remove-MgApplication?

Remove-MgApplication is a Microsoft Graph PowerShell cmdlet used to delete an application registration from Microsoft Entra ID (Azure AD). When you remove an application, the app object is deleted from the tenant, meaning it can no longer be used for authentication, API permissions, or integrations.

This cmdlet is typically used when an app is no longer required, is deprecated, or must be removed for security or compliance reasons.

Why Use Remove-MgApplication?

Administrators use Remove-MgApplication to automate application lifecycle cleanup, such as:

• Deleting unused or obsolete app registrations
• Removing insecure or non-compliant applications during audits
• Cleaning up test or temporary applications in bulk
• Maintaining a secure and well-governed tenant
• Avoiding manual deletions in the Entra admin center, especially in large environments

Because applications often have high privileges, automating their cleanup reduces risk and keeps the tenant tidy.

Prerequisites

Before running Remove-MgApplication, ensure:

1. Microsoft Graph PowerShell module is installed
2. You are connected to Graph with proper permissions

Install-Module Microsoft.Graph -Scope CurrentUser
Connect-MgGraph -Scopes "Application.ReadWrite.All"
                                            

Note: You must have rights such as Application Administrator, Cloud Application Administrator, or Global Administrator.

How to use Remove-MgApplication?

Remove-MgApplication requires the ApplicationId (Object ID) of the app you want to delete. You can also use safety parameters like -WhatIf and -Confirm.

Basic syntax:

Remove-MgApplication -ApplicationId <String> [-WhatIf] [-Confirm] [<CommonParameters>]

Remove-MgApplication Examples

• Example 1: Remove a Specific Application by ID

Remove-MgApplication -ApplicationId "12345678-90ab-cdef-1234-567890abcdef"

This command removes the application with the specified application ID from Azure AD.

• Example 2: Simulate Removal to See the Impact

Remove-MgApplication -ApplicationId "12345678-90ab-cdef-1234-567890abcdef" -WhatIf

Using the -WhatIf parameter, you can see what would happen if you run the cmdlet without actually removing the application.

• Example 3: Remove an Application with Confirmation Prompt

 Remove-MgApplication -ApplicationId "12345678-90ab-cdef-1234-567890abcdef" -Confirm

The -Confirm parameter prompts you for confirmation before proceeding with the removal of the application.