Use Protected Actions to Stop Attackers Hard-Deleting Entra ID Accounts

An article about the horrible devastation that an attacker can wreak inside a compromised Microsoft 365 tenant highlighted how protected actions can help by preventing attackers from being able to permanently remove user accounts unless they can pass additional authentication tests. Protected actions won’t stop attackers that have complete control over a tenant, but it might irritate them!

https://office365itpros.com/2025/02/11/entra-id-protected-action/