Delete Gsa Application Registration

Delete a GSA application registration from Azure AD including associated objects

Description

This runbook deletes a Global Secure Access application registration created by the "add-gsa-application-registration" runbook, including everything provisioned with it: the application (and thereby its service principal, application segments and connector group assignment) and the security group created by the naming scheme.

The naming scheme group is identified via the groups assigned to the application whose display name matches the admin-defined group prefix. If the group was created but never assigned (partial provisioning), a best-effort lookup by naming scheme is performed.

Safety measures:

• The runbook verifies the application is actually a GSA / App Proxy application (onPremisesPublishing) before deleting anything.
• By default only security group(s) matching the naming scheme are deleted. Other groups assigned to the application are listed but NOT deleted, as they may be shared with other applications. Set deleteAllAssignedGroups to change this.

Location

Organization → Applications → Delete GSA Application Registration

Full Runbook name

rjgit-org_applications_delete-GSA-application-registration

Details

Property	Value
Version	1.2.2
Required modules	RealmJoin.RunbookHelper (>= 0.8.7) Microsoft.Graph.Authentication (>= 2.39.0)
Schedulable	no

Permissions

Application permissions

• Type: Microsoft Graph

  • Application.ReadWrite.All
  • Group.ReadWrite.All

Parameters

applicationName

The full display name of the GSA application to delete, e.g. "GSA-MyApp".

Property	Value
Required	true
Default Value
Type	String
Portal display name	Application Name (full display name, e.g. GSA-MyApp)

groupPrefix

Prefix of the security group naming scheme, used to identify the group(s) to delete. Must match the groupPrefix of the add-gsa-application-registration runbook. Default: "App - Entra - GSA - ".

Property	Value
Required	false
Default Value	App - Entra - GSA -
Type	String
Hidden in portal	yes (preset via runbook customization)

groupSuffix

Optional suffix of the security group naming scheme. Default: empty.

Property	Value
Required	false
Default Value
Type	String
Hidden in portal	yes (preset via runbook customization)

deleteAllAssignedGroups

If true, ALL groups assigned to the application are deleted, not only the naming scheme group(s). Use with care - assigned groups may be shared with other applications. Default: false.

Property	Value
Required	false
Default Value	False
Type	Boolean
Portal display name	Also delete ALL other groups assigned to the application (careful - groups may be shared)

Back to Runbook Reference overview