Unverified50% confidenceFactExact time
Azure AD triggers a DELETE request in some configurations when an administrator directly removes a user from an application assignment, but if a user gained access through a group assignment and is then removed from the group, Azure AD may only send a group membership change event without sending a user-level deprovisioning request.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/12/2026
First Seen
Valid until: 12/11/2026
Sources
Related Entities
Related Claims
UnverifiedNot all identity directories proactively send deprovisioning events; some IdPs do not send a separate user-level deprovisioning request when a user is removed from a group or has their application assignment revoked.68% similarUnverifiedWhen a user loses membership in their sole authorizing group, the deprovisioning process should be triggered even if no user-level active=false event has been received.60% similarUnverified团队席位拆分转售模式下，用户被拉进陌生团队账户，管理员可随时移除访问权限，一旦管理员停止续费或被封禁所有席位用户会同时失去访问权58% similarUnverifiedDMA要求守门人平台允许广告主免费获取其广告效果数据，并禁止将不同服务的个人数据未经同意进行合并55% similarUnverifiedADB uninstallation in a non-rooted environment does not truly delete system apps; instead, it marks them as uninstalled for a specific user (user 0), while the APK remains in the system partition and can be restored via pm install-existing54% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/910723API
curl https://kongchang.com/api/v1/knowledge/claims/910723MCP
get_claim(id=910723)