Microsoft Entra ID Governance
GovernanceEntitlement Management Request Behalf
In brief
The documentation adds examples describing how designated users can request access packages for others and clarifies that both requestors and targets need the required license.
What Entra admins need to know
Admins can better understand the intended scenarios and licensing requirements when configuring or explaining on-behalf-of requests.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Now, managers are empowered to request access on behalf of new hires who haven't gone through the IT training. This ensures that employees have the tools and resources necessary to start on day one, and increases new hire satisfaction as they don’t need to wait for access or navigate the request process on their own.
Scenarios for users requesting on behalf of other users
Imagine you're leading a project that includes employees, contractors, or external collaborators. You already know which resources each person needs, but some participants might be unfamiliar with My Access or your organization's access request process. Asking everyone to submit their own request can lead to confusion and delays, especially when a project needs to get started quickly.
Instead, your organization can set up access package policies that allow designated users, such as project leads, team coordinators, or help desk personnel, to request access on behalf of others.
This allows you to select the person who needs access, choose the appropriate access package, and provide the required request details for them. The request still follows the approval and access lifecycle processes defined in the policy, helping your organization maintain oversight while making the experience easier for users
Scenarios for requesting on behalf of agent identities
The ability for administrators to request on behalf of agent identities they own or sponsor is also another key scenario for requesting access packages on behalf of other identities. With the ability to request an access package for an agent identity, You're able to ensure that agents working on behalf of you in your environment has the access to what they need to do their job, but nothing further. For more information on managing agents, see: Manage Agents in Microsoft Entra. [!INCLUDE active-directory-p2-governance-license.md]
License requirements for requesting on behalf of agent identities (preview)
@@ -26,6 +26,13 @@ Instead of conducting numerous ad-hoc training sessions to ensure new hires know Now, managers are empowered to request access on behalf of new hires who haven't gone through the IT training. This ensures that employees have the tools and resources necessary to start on day one, and increases new hire satisfaction as they don’t need to wait for access or navigate the request process on their own. +## Scenarios for users requesting on behalf of other users+Imagine you're leading a project that includes employees, contractors, or external collaborators. You already know which resources each person needs, but some participants might be unfamiliar with My Access or your organization's access request process. Asking everyone to submit their own request can lead to confusion and delays, especially when a project needs to get started quickly.++Instead, your organization can set up access package policies that allow designated users, such as project leads, team coordinators, or help desk personnel, to request access on behalf of others.++This allows you to select the person who needs access, choose the appropriate access package, and provide the required request details for them. The request still follows the approval and access lifecycle processes defined in the policy, helping your organization maintain oversight while making the experience easier for users+ ## Scenarios for requesting on behalf of agent identities The ability for administrators to request on behalf of agent identities they own or sponsor is also another key scenario for requesting access packages on behalf of other identities. With the ability to request an access package for an agent identity, You're able to ensure that agents working on behalf of you in your environment has the access to what they need to do their job, but nothing further. For more information on managing agents, see: [Manage Agents in Microsoft Entra](../agent-id/manage-agent.md).@@ -35,7 +42,7 @@ The ability for administrators to request on behalf of agent identities they own [!INCLUDE [active-directory-p2-governance-license.md](~/includes/entra-p2-governance-license.md)] > [!NOTE]-> Both the manager (requestor) and the employee (target) must be licensed for Microsoft Entra ID Governance or Microsoft Entra Suite to use the on-behalf-of request feature.+> Both the manager/user (requestor) and the employee/user (target) must be licensed for Microsoft Entra ID Governance or Microsoft Entra Suite to use the on-behalf-of request feature. ### License requirements for requesting on behalf of agent identities (preview)