Is DecomDevilFish in Microsoft Entra Safe? Enterprise Application Guide
Question details
A Microsoft Entra administrator needs to verify the legitimacy and safety of an enterprise application named DecomDevilFish and understand why it cannot be deleted.

- Product
- Microsoft Entra
- Device & OS
- not provided
- Scenario
- Reviewing enterprise applications in a Microsoft 365 tenant for security auditing and management.
- Observed behavior
- An undocumented application named DecomDevilFish is present in the tenant and lacks a standard deletion option.
Ensure you have Global Administrator or Privileged Role Administrator access in Microsoft Entra to review service principals and enterprise applications.
Review Application Details in Microsoft Entra
Verify the service principal properties to understand its origin as a backend application.
DecomDevilFish is typically a backend service application present across multiple Microsoft 365 tenants. Because it is installed server-side by Microsoft, standard deletion options may be intentionally disabled.
Log in to the Microsoft Entra admin center with appropriate administrative credentials.
Go to Identity > Applications > Enterprise applications in the left-hand navigation menu.
Search for "DecomDevilFish" to view its specific properties, permissions, and service principal details.
Alternatively, open PowerShell, connect to your tenant, and run the command Get-MsolServicePrincipal to review the backend service principal details.

Experience a Secure and Lightweight Alternative with WPS Office
While Microsoft 365 involves managing complex backend applications and service principals in Entra, WPS Office offers a simpler, lightweight, and highly secure alternative for your daily document needs without the overhead of heavy enterprise application management.
- 1. Download WPS Office: Visit the official WPS Office website to download the free, lightweight installer.
- 2. Install the Software: Run the installer and follow the simple on-screen instructions to set up the suite on your device.
- 3. Open Your Documents: Seamlessly open your existing .docx, .xlsx, and .pptx files directly in WPS Office.

Frequently Asked Questions
Why can't I delete DecomDevilFish from Microsoft Entra?
First-party or backend server-side applications managed by Microsoft often have their deletion options disabled by design to prevent accidental disruption of tenant services.
Does DecomDevilFish pose a security risk to my tenant?
Generally, it is a legitimate backend application present in many Microsoft 365 tenants. However, you should verify its service principal details in your Entra portal to ensure it matches standard backend app profiles.
How do I use PowerShell to check this application?
You can connect to Microsoft 365 via PowerShell and run the Get-MsolServicePrincipal command to list and review the properties of all service principals, including DecomDevilFish.
Where can I get official confirmation about undocumented Entra applications?
The best place to get tenant-specific confirmation for undocumented enterprise applications is the official Microsoft Entra ID Q&A forum, where Microsoft moderators and engineers can investigate your tenant.




