Skip to main content

Delete App Roles

As an owner or administrator of a Microsoft Entra application, you are responsible for managing the app roles associated with that application. This includes identifying and removing roles that are no longer relevant or required. Using EmpowerID’s Resource Admin, you can initiate the deletion of these app roles, and EmpowerID will process the change on your behalf by removing the roles from Microsoft Entra ID. This article provides step-by-step instructions to help you maintain a secure and streamlined role configuration for your application.

warning

Deleting an app role is permanent and cannot be undone. Ensure the role is no longer in use before proceeding.

What You’ll Need​

RequirementDescription
Access to Resource AdminYou must be signed in to the EmpowerID Resource Admin portal.
Application OwnershipYou must be the owner or a delegated administrator of the application.

Steps to Delete an App Role​

1. Open the Application Overview Page​

  1. Log in to Resource Admin.
  2. In the Resource Type menu, select Applications.
  3. Search for and select the Microsoft Entra application you want to manage.
  4. Click the Details button for the application.
    Application Details
    This opens the application Overview page.
    Application Overview

2. Locate and Delete the App Role​

  1. In the left application menu, click App Rights (Microsoft Entra "App Roles").
  2. In the App Rights grid, locate the app role you want to delete.
  3. Click the Delete button for the corresponding role.
    Delete App Role Button
  4. In the confirmation dialog, click Delete to proceed.
    Confirm Delete App Role

This method deletes the selected app role directly and is the recommended approach for most users.

Alternate Workflow Options​

EmpowerID also supports managing or deleting app roles through workflow actions accessible via the context menu in the App Rights grid. These include launching the Delete or Manage App Role workflows.

Note:
Alternate methods for managing or deleting Microsoft Entra app roles—such as those launched from the gear icon context menu—are supported in EmpowerID and may be documented separately in the future.

What Happens Next​

  • EmpowerID deletes the selected app role(s) from the associated Microsoft Entra application.
  • Changes are logged in the EmpowerID audit trail for compliance and visibility.
  • Deleted roles will no longer appear in the App Rights grid or be available for assignment.