Microsoft Entra ID Governance

Lifecycle Workflow Templates

20 August 2026Doc update+3 / −3 lines

In brief

The mover workflow templates now list the “Remove all access package assignments for user” task, with removal scheduled by default for 15 days.

What Entra admins need to know

Administrators reviewing mover workflows can account for scheduled removal of all access package assignments.

This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.

Documentation change

View full page diff

View on Microsoft Learn

The comparison below shows only the changed extract. Use the full-page view for complete context.

|---------|---------|---------| |Category | Mover | ❌ | |Trigger Type | On-demand | ❌ | |Tasks | Run a Custom Task Extension, Remove all access package assignments for user (scheduled removal defaulting to 15 days) | ✔️ |

|Trigger Type | Attribute changes, Group Membership change | ✔️ | |Trigger details | Depends on trigger type selection.
• Attribute changes: Trigger attribute
• Group membership changes: Added to group/Remove from group | ✔️ | |Scope | Depends on trigger.
Rule based: Attribute changes.
Group membership change: Group based. | ✔️ | |Tasks | Remove all access package assignments for user (scheduled removal defaulting to 15 days), Remove user from selected Teams, Send email to notify manager of user move | ✔️ |

Employee job profile change

|Trigger Type | Attribute changes, Group Membership change | ✔️ | |Trigger details | Depends on trigger type selection.
• Attribute changes: Trigger attribute
• Group membership changes: Added to group/Remove from group | ✔️ | |Scope | Depends on trigger.
Rule based: Attribute changes.
Group membership change: Group based. | ✔️ | |Tasks | Send email to notify manager of user move, Remove all access package assignments for user (scheduled removal defaulting to 15 days), Remove user from selected groups, Remove user from selected Teams, Request user access package assignment | ✔️ |

For a tutorial on setting up a workflow that uses the Employee job profile change template, see: Automate employee mover tasks when they change jobs using the Microsoft Entra admin center.

@@ -111,7 +111,7 @@ The default specific parameters for the **Real-time employee change** template a |---------|---------|---------| |Category     |  Mover       |  ❌       | |Trigger Type     | On-demand        |  ❌       |-|Tasks     | **Run a Custom Task Extension**    |  ✔️       |+|Tasks     | **Run a Custom Task Extension**, **Remove all access package assignments for user** (scheduled removal defaulting to 15 days)    |  ✔️       |  > [!NOTE] > As this template is designed to run on-demand, no execution condition is present.@@ -204,7 +204,7 @@ The default specific parameters for the **Employee group membership changes** te |Trigger Type     | Attribute changes, Group Membership change        |  ✔️       | |Trigger details     | Depends on trigger type selection. <br> • **Attribute changes**: Trigger attribute <br>• **Group membership changes**: Added to group/Remove from group    |   ✔️      | |Scope     | Depends on trigger. <br> **Rule based**: Attribute changes.<br> **Group membership change**: Group based.       | ✔️        |-|Tasks     | **Remove access package assignment for user**, **Remove user from selected Teams**, **Send email to notify manager of user move**     |  ✔️       |+|Tasks     | **Remove all access package assignments for user** (scheduled removal defaulting to 15 days), **Remove user from selected Teams**, **Send email to notify manager of user move**     |  ✔️       |  ### Employee job profile change @@ -220,7 +220,7 @@ The default specific parameters for the **Employee job profile change** template |Trigger Type     | Attribute changes, Group Membership change        |  ✔️       | |Trigger details     | Depends on trigger type selection. <br> • **Attribute changes**: Trigger attribute <br>• **Group membership changes**: Added to group/Remove from group    |   ✔️      | |Scope     | Depends on trigger. <br> **Rule based**: Attribute changes.<br> **Group membership change**: Group based.         | ✔️        |-|Tasks     | **Send email to notify manager of user move**, **Remove user from selected groups**, **Remove user from selected Teams**, **Request user access package assignment**    |  ✔️       |+|Tasks     | **Send email to notify manager of user move**, **Remove all access package assignments for user** (scheduled removal defaulting to 15 days), **Remove user from selected groups**, **Remove user from selected Teams**, **Request user access package assignment**    |  ✔️       |  For a tutorial on setting up a workflow that uses the **Employee job profile change** template, see: [Automate employee mover tasks when they change jobs using the Microsoft Entra admin center](tutorial-mover-custom-workflow-portal.md).