How to Manage Unused Enterprise Applications in Azure?

You might want to pull some logs, but honestly, I found them to be kind of unreliable, so I had to double-check things anyway. A good approach is to make a list of the apps, disable them, and remove all users from those apps. Then give it a month; if no one complains or needs access to one you disabled, you can safely let it go. Setting a calendar reminder to tackle a few each day can make it feel less overwhelming.

There’s a specific report you can run that shows which applications grant the most access. I recommend starting there to target the highly permissive apps first, and you can probably skip the ones that are used for SSO to third-party services.

Consider labeling all the resources and tracking ownership. It should be the owner's responsibility to justify their app's existence. If they fail to do so within a specified time frame, say six months, it should be deleted. Also, automating the process to check for new enterprise apps and their assigned owners can help avoid clutter down the line. The initial task will be to identify and classify the existing applications—some you can ignore, and some you should track closely.

Oh, that report mention sounds intriguing! Any idea what it’s called?