Guest users are commonly added to Microsoft 365 when organizations need to collaborate with people outside their tenant. These users may be customers, contractors, or business partners who need access to Microsoft 365 resources.
As external collaboration grows, guest accounts can quickly accumulate. Some may still need access, while others may no longer be active. Regularly reviewing these accounts helps administrators maintain visibility over external access and keep the directory organized.
How you find guest users depends on your environment. Cloud-based guests can be identified through Microsoft Entra ID, while hybrid organizations may also need to review accounts in on-premises Active Directory. This guide explains how to find guest users across both cloud and hybrid Microsoft 365 environments.
How to Find Guest Users in Microsoft 365
Microsoft 365 provides several ways to identify guest users. The admin portals work well for quick checks, while PowerShell is more suitable when you need to retrieve or process a larger number of accounts.
Method 1: List All Guest Users Using Microsoft 365 Admin Center
This is the quickest and easiest way for basic user management.
- Sign in to the Microsoft 365 admin center using an admin account.
- In the left navigation menu, expand Users.
- Click on Guest users.
You will see a list of all current guest users. From here, you can open an individual account to investigate its properties, memberships, assigned access, and other available information.
Method 2: Find All Guest Users Using Microsoft Entra Admin Center
This method provides deeper technical information, such as creation types and sign-in status.
- Log in to the Microsoft Entra Admin Center.
- Navigate to Identity > Users > All users.
- Click the Add Filter button at the top.
- Set the parameter filter to User type == Guest and click Apply.
This is especially useful when you are investigating a particular external account or performing a quick administrative review directly from the portal.
For larger environments, however, PowerShell provides a more scalable approach.
Method 3: Export Guest Users Report Using PowerShell
If you prefer automation or need to generate large reports, you can use Microsoft Graph PowerShell module. Run the following command to retrieve all guest accounts.
#Connect to your M365 tenant
Connect-MgGraph -Scopes "User.Read.All"
#Retrieve all users where the UserType property matches "Guest"
Get-MgUser -Filter "UserType eq 'Guest'" -AllYou can also export the list of guest users in Microsoft 365 to a CSV file.
Get-MgUser -Filter "UserType eq 'Guest'" -All |
Select-Object DisplayName, UserPrincipalName, Mail, AccountEnabled |
Export-Csv "C:\Reports\GuestUsers.csv" -NoTypeInformation Make sure the destination folder exists before running the export. This approach is particularly useful for larger tenants, recurring administrative reviews, or situations where the guest information needs to be processed further.
Method 4: Find Guest Users Using EasyEntra
EasyEntra provides an even more simple way to identify guest users directly from the Entra ID without running PowerShell commands.
To find guest users in EasyEntra:
- Navigate to Entra ID > Users.
- Switch to Full Loading Mode from the drop-down in the top bar.
- In the search field, enter:
type=guest 
EasyEntra will filter the user list and display accounts with the Guest user type. You can then review the relevant user properties directly from the interface.
Why Is Full Loading Mode Required?
Full Loading Mode loads all directory objects and their available attributes, allowing you to perform advanced searches and filter the complete dataset in real time. This makes it possible to use filters such as type=guest to quickly narrow the user list.
For smaller tenants with fewer than 1,000 objects, Full Loading Mode can be used by default. In larger environments, it is better suited for on-demand use when advanced filtering or detailed analysis is required.
Once guest identities have been identified, administrators should determine whether the accounts still have a valid business purpose. It is also useful to check which groups they belong to, what resources they can access, whether the accounts are enabled, and whether the external collaboration is still active. Older guest accounts should not automatically be deleted simply because they have existed for a long time. Their current access and business requirement should be verified first.
Regular reviews make it easier to keep external collaboration manageable without unnecessarily disrupting legitimate access!
