Description:

This step deletes an existing Microsoft Entra ID group.

The Delete EntraID Group workflow step connects to Microsoft Entra ID (formerly Azure Active Directory) and permanently removes a specified security group or Microsoft 365 group from the configured tenant.

The step identifies the group by its name and deletes it from Microsoft Entra ID. Once deleted, the group is no longer available for user membership, permission assignment, or application access.

The step supports:

• Microsoft Entra ID group deletion
• Configurable Entra ID connections
• Group lookup by group name
• Automated group lifecycle management
• Integration with Microsoft Graph through FlowWright connections

This step can be used for:

• Project closure
• Temporary team cleanup
• Department restructuring
• Security group administration
• Identity lifecycle management
• Environment cleanup
• Business process automation

Usage:

The Delete EntraID Group step is typically placed after an approval or verification step in a workflow that removes obsolete or temporary Microsoft Entra ID groups.

The workflow deletes the specified Microsoft Entra ID group using the configured connection.

Once the group has been deleted, later workflow steps can:

• Generate audit reports
• Notify administrators
• Update external systems
• Remove related application references
• Continue identity lifecycle management processes
• Complete environment cleanup activities

You need to set up an EntraID connection. Go to Integration > Connections > Generic Connections. On the Manage Generic Connections page, click Actions > Create. A sample connection is included here for reference. 

Example:

Let’s build and execute the “clsDeleteEntraIDGroupDef” example:

• Create a new process definition named “clsDeleteEntraIDGroupDef” and open it in designer mode. 
• Drag a “clsDeleteEntraIDGroup” step to the canvas.
• Connect the dots between the “Start” and “clsDeleteEntraIDGroup” steps.
• Click the "clsDeleteEntraIDGroup" step to configure its "Required" properties. Provide a name for the step. Select the EntraID connection from the drop-down list. Enter the “Group Name”. Click the Save button. Note: Click the "AI Predict" button to have the Copilot add new process steps that match your process description. 

• The “Logging” configuration is necessary for documentation and also measures workflow progress and percent complete. This is achieved by configuring the step state and percent fields individually, as shown below. Configure the “Logging” using the following properties.

• Save the Process Definition. Create a new Process Instance and execute it. When the workflow reaches the Delete Group step, FlowWright connects to the configured Microsoft Entra ID tenant and attempts to delete the specified group. If the group is successfully deleted, the workflow follows the Deleted return path. If the group cannot be found, the deletion is not permitted, or the connection cannot be established, the workflow follows the NotDeleted return path.

Tips:

• Verify that the Microsoft Entra ID connection has been configured before using this step.
• Use workflow variables to dynamically specify the group name.
• Verify that the specified group exists before attempting deletion.
• Ensure the group is no longer required before deleting it, as deletion may affect users, applications, and permissions.
• Use the Deleted and NotDeleted return paths to implement appropriate success and error handling.
• Combine this step with user removal, access cleanup, or notification steps to fully automate group decommissioning.

Notes:

• A valid Microsoft Entra ID connection must exist before this step can execute.
• The configured connection must have sufficient Microsoft Graph permissions to delete Microsoft Entra ID groups.
• The specified group must already exist in Microsoft Entra ID.
• Deleting a group permanently removes its memberships and associated permissions.
• Network connectivity or authentication issues may prevent successful group deletion.
• The workflow should include appropriate error handling for the NotDeleted return path.
• Consider exporting or documenting group membership before deletion if it may be required for auditing or recovery.

Definition Sample:

You may download the sample definition(s) from the link provided and later import them (drag-and-drop) into your FlowWright Process Definition (XML file) or Form Definition (HTML file) page.

Note: Verify and complete any missing configuration after importing the sample, including:

• Microsoft Entra ID connection
• Group name mapping
• Workflow variable mappings
• Microsoft Graph permissions
• Environment-specific settings

After verifying the configuration, save the Process Definition before execution.

Click here to download the sample file.