How local users work: When someone signs in via Microsoft SSO for the first time, a local user record is created in db.json storing their name, email, and Azure subject ID. Removing a user here only deletes their local record — it does not remove them from Azure. Their access is still controlled by the Enterprise Application in Azure Portal.

After removal, the user will be re-created automatically on their next successful sign-in. Use this to force re-authentication or to clean up stale records from users removed in Azure.

No local user records. Users are created automatically on first sign-in via Microsoft SSO.