Guest Users

The Guest Users page in MSPControl is used to manage external users who have access to the Azure-connected organization as guest accounts. This page helps administrators review guest identities, check their sign-in details, control whether guest accounts are enabled or disabled, remove guest access when needed, and send guest-user reporting.

This section is especially useful for organizations that collaborate with external partners, contractors, vendors, or customer-side contacts. Instead of handling those accounts separately, MSPControl provides a dedicated page where guest access can be reviewed and managed in one place.

Table of Contents

• Guest Users Overview
• Guest Users List Page
• Guest Users Page Controls
• Guest Users Table Columns
• Guest Users Bulk Actions
• Guest Users Actions Column
• How Guest Users Fit into MSPControl
• Best Practices

Guest Users Overview

The Guest Users page acts as the central list of external Azure guest accounts associated with the organization. These are not standard internal users. They are guest identities that exist to support collaboration and controlled external access.

Because guest accounts often have different lifecycle and security expectations than internal users, this page is useful for periodic access review. It allows administrators to see who the guest users are, what their sign-in identifiers look like, whether they are still active, and what administrative actions can be taken against them.

Guest Users List Page

The main Guest Users page displays all guest accounts in a table. The page includes controls for creating new guest users, running bulk actions, sending a guest users report, filtering the list, searching the table, and adjusting column visibility.

This page is useful for both day-to-day management and periodic governance review. Administrators can use it to confirm which external users currently exist, validate their identifiers, and quickly disable or delete accounts when guest access is no longer required.

Guest Users Page Controls

1. New guest user opens the workflow for creating a new guest account in the organization.
2. Selected Action opens the bulk action menu for the selected guest users.
3. Apply runs the currently selected bulk action against the checked guest-user rows.
4. Send Guest Users Report generates or sends a report covering guest-user records for the organization.
5. Top Filter Dropdown provides an additional list-level filter for the current guest-user view.
6. Category Filter allows the table to be narrowed using the available dropdown options.
7. Search helps locate a guest user by display name, user principal name, email address, or other searchable value.
8. Column Visibility allows administrators to choose which columns remain visible in the table.
9. Page Size Selector controls how many guest-user rows are displayed at one time.

Guest Users Table Columns

1. Selection Checkbox allows one or more guest-user rows to be selected for bulk actions.
2. Edit opens the selected guest-user record for editing.
3. Display Name shows the visible name of the guest user.
4. User Principal Name shows the guest account sign-in identifier. In Azure guest-user scenarios, this often appears in an externalized format that includes the original source and the tenant suffix.
5. Email Address shows the guest user’s email address.
6. Expiration Time shows any configured expiration value for the guest account when available.
7. Last Login shows the most recent sign-in timestamp when available.
8. Actions provides row-level administrative actions for the guest account.

This table is especially helpful because it combines identity, contact, and lifecycle information in one view, making external access review easier and faster.

Guest Users Bulk Actions

The Selected Action dropdown allows administrators to apply the same operation to multiple guest accounts at once. In the screenshot provided, the available bulk actions are:

1. Delete Guest Users removes the selected guest-user accounts.
2. Disable Guest Users disables the selected guest-user accounts so they no longer have active access.
3. Enable Guest Users re-enables selected guest-user accounts when access should be restored.

These bulk controls are useful when guest access must be cleaned up after a project ends, when accounts need to be suspended temporarily, or when several guest users must be reactivated together.

Because these actions can affect multiple external users at once, administrators should review selected rows carefully before clicking Apply.

Guest Users Actions Column

The Actions column provides row-level controls for individual guest-user management.

1. Disable or Enable Icon controls whether the specific guest account is active. This is useful when access should be suspended without deleting the account completely.
2. Delete Icon removes the guest-user account.

These row-level actions are useful when only one guest account needs immediate attention and a bulk action would be unnecessary.

Guest User Identity Format

The User Principal Name values shown in the table reflect the Azure guest-user identity format. These identifiers often preserve the original external identity source and append the destination tenant naming pattern. This makes the column technically useful during troubleshooting and access validation, because it helps administrators distinguish guest identities from standard internal user accounts.

In practice, the Display Name and Email Address columns are usually easier for daily review, while the User Principal Name is more useful for technical verification and Azure-side consistency checks.

Guest Users Report

The Send Guest Users Report action is useful when administrators need a shareable or auditable overview of external access. This can support governance reviews, customer reporting, vendor access checks, or internal security validation.

Because guest users often represent third-party access into the environment, reporting on them is especially valuable during periodic access certification and cleanup exercises.

How Guest Users Fit into MSPControl

The Guest Users page gives MSPControl a dedicated place for external identity management inside the Azure section. This is important because guest accounts are operationally different from standard internal users. They often need separate review, different lifecycle handling, and tighter governance.

By keeping guest users in their own page, MSPControl makes it easier to review who still has outside access to the organization and to take action quickly when that access is no longer needed.

Best Practices

• Review the Guest Users page regularly to confirm that external access is still required for each listed account.
• Use Disable Guest Users when access should be paused temporarily, and use Delete Guest Users only when the guest account is no longer needed at all.
• Check Display Name, Email Address, and User Principal Name together before taking action so the correct external identity is selected.
• Use the bulk action menu carefully, especially when several guest accounts are selected at once.
• Use Send Guest Users Report for periodic governance review, external-access audits, or customer-facing reporting.
• Pay attention to Last Login and Expiration Time when those values are available, because they help identify stale or overdue guest access.
• Prefer least-privilege thinking for guest users and remove or disable accounts once collaboration ends.
• Keep the guest-user list clean so external identities do not remain active longer than necessary.