Skip to main content
Version: 2.0.1 (preview)

Test-MtEntitlementManagementOrphanedResources

SYNOPSIS​

Checks if catalogs contain unused resources without associated access packages

SYNTAX​

Test-MtEntitlementManagementOrphanedResources [-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTION​

MT.1110 - No catalog should contain resources without any associated access packages

This test identifies Microsoft Entra ID Governance access package catalogs that contain resources (groups, applications, SharePoint sites) that are not used in any access package.

Unused catalog resources can indicate:

  • Resources added but never configured in packages
  • Leftover resources from deleted or modified access packages
  • Configuration drift or incomplete setup
  • Potential security and governance gaps
  • Wasted administrative effort maintaining unused resources

The test validates that:

  • All catalog resources are used in at least one access package
  • Resources are properly linked to package role scopes
  • No orphaned resources exist in catalogs
  • Catalog resources serve their intended purpose

Learn more: https://maester.dev/docs/tests/MT.1110

EXAMPLES​

EXAMPLE 1​

Test-MtEntitlementManagementOrphanedResources

Returns $true if all catalog resources are used in access packages

PARAMETERS​

-ProgressAction​

{{ Fill ProgressAction Description }}

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters​

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS​

OUTPUTS​

System.Boolean​

NOTES​

https://maester.dev/docs/commands/Test-MtEntitlementManagementOrphanedResources