📋 Microsoft Entra Documentation Changes

- **External users** are consumers and business customers who use the apps registered in your external tenant. They typically retain default user permissions, meaning you don't assign them administrative roles. These users are usually created through self-service sign-up, but you can create them with the [Create new external user](~/fundamentals/how-to-create-delete-users.yml#create-a-new-external-user) option in the Microsoft Entra admin center or with Microsoft Graph.

- **Internal users** are usually admins to whom you assign [Microsoft Entra roles](~/identity/role-based-access-control/permissions-reference.md). You can create internal users and assign roles using the [Create new user](~/fundamentals/how-to-create-delete-users.yml#create-a-new-user) option in the admin center or with Microsoft Graph.

- **Invited users** are usually admins you invite to the external tenant and to whom you assign [Microsoft Entra roles](~/identity/role-based-access-control/permissions-reference.md). If they're not assigned a role, they have default user permissions. You can invite users and assign roles using the [Invite external user](~/fundamentals/how-to-create-delete-users.yml#invite-an-external-user) option in the admin center or with Microsoft Graph.

### Invite an external user through the admin center

 

An admin can invite an external user from the Microsoft Entra admin center. The invited user receives an email invitation and can redeem it by selecting the invitation link, which creates the user account in the External ID tenant. For more information, see [Invite users to your external tenant](/entra/external-id/customers/how-to-manage-customer-accounts#invite-a-customer).

 

ms.date: 03/13/2025

[Microsoft Entra Agent ID](~/agent-id/what-is-microsoft-entra-agent-id.md) provides these constructs through agent identities and agent identity blueprints. Agent identities offer enforced human sponsorship, lifecycle governance from provisioning through deactivation, and at-scale management through blueprints that apply centralized security policies across all agent instances of a given type. For more information, see [Microsoft Entra security for AI overview](~/agent-id/security-for-ai-overview.md).

| Create or delete users | Add new members or guests to your organization, or remove existing users. | [Create or delete users](./how-to-create-delete-users.yml) |

* [Create or delete users](./how-to-create-delete-users.yml)

> If you permanently delete a user by mistake, you have to create a new user and manually enter all the previous information. For more information about creating a new user, see [Add or delete users](./how-to-create-delete-users.yml).

- [Add or delete users](./how-to-create-delete-users.yml)

- **A test account called Isabella Simonsen**: If you don't know how to create a test account, see [Add cloud-based users](../../fundamentals/how-to-create-delete-users.yml).

When no longer needed, delete the test user. If you don't know how to delete a Microsoft Entra user, see [Delete users from Microsoft Entra ID](../../fundamentals/how-to-create-delete-users.yml).

- **A test account called Isabella Simonsen** - If you don't know how to create a test account, see [Add cloud-based users](~/fundamentals/how-to-create-delete-users.yml).

When no longer needed, delete the test user. If you don't know how to delete a Microsoft Entra user, see [Delete users from Microsoft Entra ID](~/fundamentals/how-to-create-delete-users.yml).

- Maintain a complete inventory of all agent identities through centralized discovery and management in the Microsoft Entra admin center and [Microsoft Graph](/graph/api/resources/agentidentity?view=graph-rest-beta&preserve-view=true), preventing shadow AI and enabling organizations to track agents across the full lifecycle — from registration and credential management through deactivation and decommissioning.

ms.date: 04/09/2025

- A test user who isn't an administrator to verify that policies work as expected before you deploy real users. To create a user, follow the steps in [How to create, invite, and delete users](../fundamentals/how-to-create-delete-users.yml).

This guide provides the basic steps to invite an external user. To learn about all of the properties and settings that you can include when you invite an external user, see [How to create and delete a user](~/fundamentals/how-to-create-delete-users.yml).

Use the following steps to create a new user account and to grant admin permissions to the account by adding a Microsoft Entra role. (Only required steps are described here. For a complete description of all properties, see the Microsoft Entra ID article [How to create users](~/fundamentals/how-to-create-delete-users.yml#create-a-new-user).)

- [How to add or delete users](./how-to-create-delete-users.yml)

- To add users, see [Add or delete a new user](./how-to-create-delete-users.yml).