Claude Code user is disabled in Entra ID
AI summary
A governance rule that detects Claude users disabled in Entra ID so you can remove their access, prevent security vulnerabilities, and stop wasting licenses on inactive accounts.
What it detects
Detects Claude users which have been disabled in Entra IDMicrosoft Entra IDMicrosoft Entra ID, formerly Azure Active Directory, is the Microsoft identity service behind every Microsoft 365 tenant.Read more and should be removed.
Why it matters
Disabled users maintaining Claude access creates critical security vulnerabilities and violates access control policies. When accounts are disabled in Entra ID, their Claude access should be immediately revoked to prevent unauthorized use. This also prevents wasting licenses on inactive user accounts.
The rule
Every Claude User that has any Users where Account enabled is false
UsersIn Rencore Governance
Details
| Applies to | Claude user |
|---|---|
| Connector | Claude Enterprise |
| Severity | Medium |
| Category | Security |
| Recommended | Yes |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check Claude user objects:
- External users in Claude organization (Medium)
- Claude user is not member of Entra ID (Medium)
Frequently asked questions
What does the Claude Code user is disabled in Entra ID policy detect?
What does the Claude Code user is disabled in Entra ID policy detect?The Claude Code user is disabled in Entra ID policy detects Claude users which have been disabled in Entra ID and should be removed.
Which objects does the Claude Code user is disabled in Entra ID policy check?
Which objects does the Claude Code user is disabled in Entra ID policy check?The Claude Code user is disabled in Entra ID policy checks Claude user objects from the Claude Enterprise inventory and reports each one that matches its rule as a violation.
How severe is a violation of the Claude Code user is disabled in Entra ID policy?
How severe is a violation of the Claude Code user is disabled in Entra ID policy?Violations of the Claude Code user is disabled in Entra ID policy have Medium severity. The policy is in the Security category.
Which module includes the Claude Code user is disabled in Entra ID policy?
Which module includes the Claude Code user is disabled in Entra ID policy?The Claude Code user is disabled in Entra ID policy comes with the Claude Enterprise connector (in preview) in the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?