An orphaned group is a group that has lost its accountability: it has no owner to answer for it, no members using it, or no remaining purpose anyone can name. Every long-lived tenant accumulates them, because groups are created freely and deleted reluctantly.
Why orphans accumulate#
Groups outlive their reasons. Projects end, owners leave the company, migrations finish, and the groups remain because deleting a group feels riskier than keeping it. Ownership decays the same way: when the last owner departs, nothing forces a replacement.
The risk they carry#
Orphans are not neutral clutter:
- An ownerless group with access grants is access nobody reviews.
- An orphaned group that still carries a license assignment quietly holds seats for whoever remains a direct member.
- Every orphan slows audits, because each one must be investigated before it can be dismissed.
VisualizerEngine
Orphans in VisualizerEngine
Orphan detection surfaces abandoned groups continuously, and the hierarchy view answers the safety question that stalls cleanups: whether a candidate still participates in nesting, carries license assignments, or overlaps another group. What-if simulation previews the deletion before anything is touched.