Microsoft Entra IDSecure Your Domain
In brief
* If needed, [create a Microsoft Entra tenant][create-azure-ad-tenant] or [associate an Azure subscription with your account][associate-azure-ad-tenant].
What Entra admins need to know
Review the documentation change to determine whether it affects tenant configuration, security posture, or rollout plans.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
Open on Microsoft Learn ↗The comparison below is an extract of the Microsoft Learn article showing only the changed content. Open the full article for complete context.
* If needed, [create a Microsoft Entra tenant][create-azure-ad-tenant] or [associate an Azure subscription with your account][associate-azure-ad-tenant].
- A Microsoft Entra Domain Services managed domain enabled and configured in your Microsoft Entra tenant.
- If needed, [create and configure a Microsoft Entra Domain Services managed domain][create-azure-ad-ds-instance].
- You need Application Administrator and Groups Administrator Microsoft Entra roles in your tenant to modify security settings for a managed domain.
- You need Domain Services Contributor Azure role to modify security settings for a managed domain.
Use Security settings to harden your domain
@@ -30,6 +30,8 @@ To complete this article, you need the following resources: * If needed, [create a Microsoft Entra tenant][create-azure-ad-tenant] or [associate an Azure subscription with your account][associate-azure-ad-tenant]. * A Microsoft Entra Domain Services managed domain enabled and configured in your Microsoft Entra tenant. * If needed, [create and configure a Microsoft Entra Domain Services managed domain][create-azure-ad-ds-instance].+ * You need [Application Administrator](/entra/identity/role-based-access-control/permissions-reference#application-administrator) and [Groups Administrator](/entra/identity/role-based-access-control/permissions-reference#groups-administrator) Microsoft Entra roles in your tenant to modify security settings for a managed domain.+ * You need [Domain Services Contributor](/azure/role-based-access-control/built-in-roles#domain-services-contributor) Azure role to modify security settings for a managed domain. ## Use Security settings to harden your domain