POA Cleanup Planner is an XrmToolBox plugin designed to help administrators analyze principalobjectaccess (POA) growth within Microsoft Dataverse and Dynamics 365 environments.

The tool highlights POA hotspots, identifies entities and records contributing to concentrated access patterns, and provides cleanup planning guidance to support improved performance, security maintenance, and reduced database growth.

• Analyze POA growth by entity and identify the largest contributors
• Detect records with unusually high numbers of access grants
• Highlight users, teams, business units, and ownership patterns contributing to POA expansion
• Generate cleanup candidate groups for inactive, inherited, or concentrated access scenarios
• Estimate cleanup impact before any remediation work is performed
• Export findings to CSV for further review and reporting
• Display clear prioritization guidance for cleanup activities

• Helps reduce principalobjectaccess table growth
• Supports improved Dynamics 365 and Dataverse performance
• Identifies high-risk access concentration areas
• Provides visibility into inherited access and ownership-related POA expansion
• Assists with planning cleanup activities before implementing automation or bulk changes
• Helps administrators better understand the impact of security model design decisions

Displays the entities, records, or ownership patterns contributing the highest POA volume within the environment. This section helps identify where the largest concentrations of access records exist and where cleanup efforts may provide the greatest value.

Displays potential cleanup targets based on inactive records, inherited access patterns, business unit changes, ownership concentrations, or other high-volume scenarios. This section is intended to help administrators prioritize which access records or security structures should be reviewed first.

Displays estimated reductions in POA volume, cleanup effort levels, and expected benefit areas. This section provides planning guidance before any cleanup work is performed.

Allows all analysis results to be exported for reporting, stakeholder review, or further analysis outside of XrmToolBox.

• Investigating large principalobjectaccess tables
• Identifying performance issues caused by excessive sharing
• Reviewing inherited access growth
• Planning business unit or team restructuring
• Evaluating the impact of record ownership models
• Supporting security cleanup initiatives
• Preparing for Dataverse storage optimization efforts

• XrmToolBox
• Microsoft Dataverse or Dynamics 365 environment
• Appropriate read access to security-related entities and metadata

• Updated analysis execution to use the XrmToolBox WorkAsync pattern
• Improved host responsiveness during Dataverse retrieval and hotspot enrichment
• Preserved summary, hotspot, candidate, impact, baseline snapshot, export preview, and log workflows
• Refined package documentation for Tool Library resubmission

• Updated analysis execution to use the XrmToolBox asynchronous execution pattern
• Improved responsiveness during Dataverse retrieval and enrichment
• Preserved hotspot, candidate, impact, baseline snapshot, export preview, and log workflows
• Refined package metadata and Tool Library submission readiness

• Initial public release
• Added POA hotspot analysis
• Added cleanup candidate recommendations
• Added cleanup impact estimation
• Added CSV export support
• Added prioritization guidance for cleanup planning