Microsoft Entra ID Governance
GovernanceLicensing
In brief
The licensing documentation now explains that most preview resource policy operations require an Entra ID Governance service plan; P1 or P2 alone is insufficient. It also documents operation exceptions, continuing role/API requirements, and `doNotEnforce` assignment behavior.
What Entra admins need to know
Administrators should verify licensing and understand that `doNotEnforce` assignments still evaluate requests; no mandatory action is stated.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
For more information about the general tenant creation requirements, see Create a new tenant in Microsoft Entra ID.
Resource policy (preview)
Most resource policy operations during preview require a Microsoft Entra ID Governance service plan, available with Microsoft Entra ID Governance or an offering such as Microsoft Entra Suite. Microsoft Entra P1 or P2 alone doesn't meet this requirement.
The features-by-license tables list required operations and exceptions for built-in and custom policies. Role and API permission requirements still apply to operations that don't require this service plan.
An enabled assignment in doNotEnforce mode still evaluates requests. Creating or editing that assignment requires the service plan; switching to doNotEnforce isn't the same as deactivating it.
For feature behavior and availability, see What is Microsoft Entra resource policy?. To assign a built-in policy, see the built-in policy quickstart.
Related content
@@ -6,7 +6,7 @@ author: tafra00 ms.author: tazkiaafra ms.service: entra-id-governance ms.topic: concept-article-ms.date: 09/14/2026+ms.date: 11/11/2026 ms.custom: msecd-doc-authoring-1018 ai-usage: ai-assisted @@ -91,6 +91,16 @@ Secure add-on tenant creation is available with Microsoft Entra Free for paid Mi For more information about the general tenant creation requirements, see [Create a new tenant in Microsoft Entra ID](~/fundamentals/create-new-tenant.md). +### Resource policy (preview)++Most resource policy operations during preview require a Microsoft Entra ID Governance service plan, available with Microsoft Entra ID Governance or an offering such as Microsoft Entra Suite. Microsoft Entra P1 or P2 alone doesn't meet this requirement.++The [features-by-license tables](#features-by-license) list required operations and exceptions for built-in and custom policies. Role and API permission requirements still apply to operations that don't require this service plan.++An enabled assignment in `doNotEnforce` mode still evaluates requests. Creating or editing that assignment requires the service plan; switching to `doNotEnforce` isn't the same as deactivating it.++For feature behavior and availability, see [What is Microsoft Entra resource policy?](resource-policy-overview.md). To assign a built-in policy, see the [built-in policy quickstart](resource-policy-quickstart-portal.md).+ ## Related content - [What is Microsoft Entra Tenant Governance?](overview.md)