According to Microsoft’s SC-300 Exam Guide and Microsoft Learn module: Manage Identity Governance in Azure AD , the removal and lifecycle management of external users (B2B guests) within Azure Active Directory’s Entitlement Management are configured through Entitlement management settings under the Identity Governance blade.

In scenarios where external partners (such as Fabrikam) are granted access via access packages , administrators can define lifecycle settings to ensure that when access is no longer required, the users are automatically removed from the directory. The Entitlement Management directory settings control two specific parameters:

Block external user from signing in to this directory — determines whether external users can still sign in after access expiration.

Remove external user — enables automatic deletion of the guest account after a specified number of days.

Number of days before removing external user — defines the delay period (in this case, 90 days).

Microsoft documentation states:

“To automatically remove external users from your directory after access expires, configure the Entitlement management settings. You can set whether to block sign-in and specify how many days after access expiration the user should be removed.”