SOLVED: Azure Synchronization Service Manager – Export completed with errors – deletingcloudonlyobjectnotallowed

If you see an EXPORT – COMPLETED WITH ERRORS message in your Azure Synchronization Service Manager, double click on it and see if tells you:

This error indicates that a deleted object was recovered from the recycle bin in Azure AD
before Azure AD Connect was able to confirm its deletion.

What is confusing about this is, if you only have a one-way sink from your on-prem Active Directory to Azure Entra ID, I wouldn’t think that it would error out but it does:

As you can see in the screenshot above the solution is simply:

1. Surf to https://portal.azure.com and sign in
2. Search for Entra ID
3. Expand DELETED USERS
4. See who is in there
   • The Azure AD Recycle Bin will automatically dump anyone in there after 30 days
   • if you want to clear the error now, click on the users and then the DELETE PERMANENTLY button at the top