Daily.Entra.NewsDaily AI-generated highlights from Microsoft Learn and Message Center. Browse the archive from 15 April 2025 → About this project →
The period is mostly low-impact Agent ID and ID Governance documentation maintenance. The meaningful changes are a new tutorial for governing agent access to Azure Database for PostgreSQL flexible server and tightened documented prerequisites for AD user and group enforcement in Microsoft Entra Cloud Sync. Several governance pages also remove “preview” labels or refresh terminology, without specifying an administrator action.
Entra ID · ProvisioningThe updated guidance requires all writable domain controllers to meet specified Windows Server update levels and requires ADSyncTools version 2.6.0 or later. It warns that enforcement cannot be configured if any writable domain controller is unsupported.
Agent ID · Conditional AccessThe tutorial shows how Microsoft Entra agent identities authenticate to Azure Database for PostgreSQL flexible server and access data through group-based authorization, entitlement management, and conditional access. It also covers prerequisites, token exchange, and database permissions.
ID Governance · FundamentalsThe overview no longer describes assigning groups and API permissions to agents as preview, and the related license-requirements heading also drops the “preview” label.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
The documentation now requires all writable domain controllers to meet specified Windows Server update levels and requires ADSyncTools version 2.6.0 or later. It also adds a warning that enforcement cannot be configured if any writable domain controller is unsupported.
The documentation adds a tutorial for configuring Microsoft Entra agent identities to authenticate to Azure Database for PostgreSQL flexible server and access data through group-based authorization, entitlement management, and conditional access.
The overview’s guidance on managing agent identities and viewing their access and activity information was updated.
The agent identity overview revises wording about automatically assigning identities to Microsoft Copilot Studio agents and creating the related identity blueprint.
The page replaces the Mississippi Division of Medicaid customer example with the Digital Security and Resilience team at Microsoft and updates the accompanying wording and link.
The entitlement management overview removes “preview” from references to assigning groups and API permissions to agents, and from the related license-requirements heading.
The overview heading and linked page title now refer to “Identity governance for agent identities” and “Governing agent identities,” with the “preview” label removed.
The heading for license requirements when requesting on behalf of agent identities no longer includes “(preview).”
The identity governance use-cases page no longer labels the Microsoft Entra Agent ID governance topic as “preview.”
The entitlement management scenarios documentation no longer labels “Govern access for agents” as preview.
