Deleting an Active Directory JIT account showed the dashboard loading animation for several minutes and then displayed an error once it finished, leaving it unclear whether the account had actually been deleted.

Deleting an AD JIT account now completes without returning an error, so you get a clear outcome for the action instead of an error message that left the account's state ambiguous.

This requires Agent updated to version 7.1.15.0

Disabling an Active Directory JIT account completed correctly at the source, but on tenants where the operation took longer to finish, the dashboard could still show the account as — and even after a manual Sync Now, the column kept showing a time instead of clearing to .

The agent now confirms the disable as soon as the account has been disabled. The dashboard reflects promptly and the Expiry Time clears as expected.

If cleanup such as security group removal doesn't complete after the account is disabled, that's now recorded as an event in the dashboard, so it no longer passes unnoticed.

Available with agent version and later — install the updated agent on your domain controllers to pick it up.