Stale Account Report
The prompt
In Microsoft Entra ID, identify stale accounts — users who have been inactive for 90 days or more. For each stale account: 1. Display name and UPN 2. Account type (member or guest) 3. Last sign-in date 4. Assigned licences (M365, Azure, or other) 5. Group memberships that grant access to sensitive resources (if identifiable) Return a table sorted by last sign-in date ascending (most stale first). Separate member accounts from guest accounts. Include a total count for each category. Do not disable or delete any accounts — report only.
How to use it
- 1Select Copy the prompt above.
- 2Paste it into Microsoft 365 Copilot.
- 3Replace anything in brackets with your own detail, then send it.
Copilot gathers and drafts. You verify and decide. Check every figure, name and date against the system it came from before you act on it.
Written for
Identity Administrator, Security Manager, Compliance Analyst
More for Microsoft Copilot for Security
- First Look — Incident Summary
- Alert Triage — Is This a True Positive?
- Multi-Alert Correlation — Single Incident Thread
- Device Investigation — Rapid Scope
From the source collection in awesome-microsoft-copilot-prompts, licensed CC BY-SA 4.0.