Remove-Entra-Group-Assignments

This script connects to Microsoft Graph and removes a specified device object
(from Entra ID / Azure AD) from all directly assigned group memberships.

The script performs the following operations:
- Retrieves all directory objects the device is a member of
- Filters results to only include Entra ID groups
- Identifies and skips dynamic membership groups (cannot be modified)
- Removes the device from all eligible (static) group memberships
- Skips non-group objects such as directory roles or administrative units

This is useful for:
- Device offboarding
- Cleanup of legacy or incorrect group assignments
- Preparing devices for reassignment or re-enrollment workflows
- Maintenance window orchestration scenarios (e.g., kiosk devices)