---
title: Tip: if you have ConnectWise Cloud Backup/SkyKick apps in Entra, disable them (don't delete) and audit app credentials tenant-wide | ctxsec
url: https://ctxsec.com/items/tip-connectwise-disable-not-delete
description: ""
status: "tip (vendor + Huntress guidance)"
published: 2026-10-17
---

> 

[← Tips & Guides](/tips) · [markdown](/items/tip-connectwise-disable-not-delete.md)

tip (vendor + Huntress guidance)

2026-10-17

### Tip: if you have ConnectWise Cloud Backup/SkyKick apps in Entra, disable them (don't delete) and audit app credentials tenant-wide

Set 'Enabled for users to sign-in' to No on ConnectWise Cloud Backup (506e08f9-…) and, unless you can verify them, the Cloud Management apps (MS Teams 24205314-…, Exchange Online b78f6a77-…, MS Graph 0de14c77-…, Partner Center 412dcf96-…, SharePoint b2b55f5b-…, base 2399d300-…; older tenants may show 'SkyKick Cloud Manager'). Deleting removes consent; disabling doesn't remove credentials already added, so review secrets and certificates on every app, remove roles you didn't grant, and check Conditional Access exclusions for these apps. Don't re-enable until ConnectWise confirms credentials are reset.

Sources: [ConnectWise Trust Center advisory](https://www.connectwise.com/company/trust/advisories) · [Huntress](https://www.huntress.com/blog/vendor-credential-enables-unauthorized-access)