Daily.Entra.News154 changes were tracked across 5 Microsoft Entra products. The leading updates include Protect your tenant with Insider Risk in Conditional Access; Recommendation Migrate Apps From Adfs To Azure Ad; Recommendation Migrate From Adal To Msal.
Microsoft 365 Migration Administrator
> | microsoft.directory/adminConsentRequestPolicy/allProperties/allTasks | Manage admin consent request policies in Microsoft Entra ID |
> | microsoft.directory/groups/restore | Restore groups from soft-deleted container |
> | microsoft.directory/groupSettings/basic/update | Update basic properties on group settings |
> | microsoft.azure.serviceHealth/allEntities/allTasks | Read and configure Azure Service Health |
> | --- | --- |
> [!div class="mx-tableFixed"]
> | --- | --- |
A Microsoft Entra documentation page was updated: Ai Administrator.
A Microsoft Entra documentation page was updated: Attack Payload Author.
A Microsoft Entra documentation page was updated: Attack Simulation Administrator.
A Microsoft Entra documentation page was updated: Attribute Assignment Administrator.
A Microsoft Entra documentation page was updated: Attribute Assignment Reader.
A Microsoft Entra documentation page was updated: Attribute Definition Administrator.
A Microsoft Entra documentation page was updated: Attribute Definition Reader.
A Microsoft Entra documentation page was updated: Azure Devops Administrator.
A Microsoft Entra documentation page was updated: Billing Administrator.
A Microsoft Entra documentation page was updated: Compliance Administrator.
A Microsoft Entra documentation page was updated: Compliance Data Administrator.
A Microsoft Entra documentation page was updated: Customer Lockbox Access Approver.
A Microsoft Entra documentation page was updated: Desktop Analytics Administrator.
A Microsoft Entra documentation page was updated: Directory Readers.
A Microsoft Entra documentation page was updated: Dynamics 365 Administrator.
A Microsoft Entra documentation page was updated: Dynamics 365 Business Central Administrator.
A Microsoft Entra documentation page was updated: Edge Administrator.
A Microsoft Entra documentation page was updated: Exchange Administrator.
A Microsoft Entra documentation page was updated: Exchange Recipient Administrator.
A Microsoft Entra documentation page was updated: Extended Directory User Administrator.
A Microsoft Entra documentation page was updated: Fabric Administrator.
A Microsoft Entra documentation page was updated: Groups Administrator.
A Microsoft Entra documentation page was updated: Guest Inviter.
A Microsoft Entra documentation page was updated: Insights Administrator.
A Microsoft Entra documentation page was updated: Insights Analyst.
A Microsoft Entra documentation page was updated: Insights Business Leader.
A Microsoft Entra documentation page was updated: Iot Device Administrator.
A Microsoft Entra documentation page was updated: Kaizala Administrator.
A Microsoft Entra documentation page was updated: Knowledge Administrator.
A Microsoft Entra documentation page was updated: Knowledge Manager.
A Microsoft Entra documentation page was updated: License Administrator.
A Microsoft Entra documentation page was updated: Message Center Privacy Reader.
A Microsoft Entra documentation page was updated: Message Center Reader.
A Microsoft Entra documentation page was updated: Microsoft 365 Backup Administrator.
Microsoft Entra Joined Device Local Administrator
A Microsoft Entra documentation page was updated: Microsoft Graph Data Connect Administrator.
A Microsoft Entra documentation page was updated: Microsoft Hardware Warranty Administrator.
A Microsoft Entra documentation page was updated: Microsoft Hardware Warranty Specialist.
A Microsoft Entra documentation page was updated: Network Administrator.
A Microsoft Entra documentation page was updated: Office Apps Administrator.
A Microsoft Entra documentation page was updated: Organizational Data Source Administrator.
A Microsoft Entra documentation page was updated: Organizational Messages Approver.
A Microsoft Entra documentation page was updated: Organizational Messages Writer.
A Microsoft Entra documentation page was updated: People Administrator.
A Microsoft Entra documentation page was updated: Permissions Management Administrator.
A Microsoft Entra documentation page was updated: Printer Administrator.
A Microsoft Entra documentation page was updated: Printer Technician.
A Microsoft Entra documentation page was updated: Search Administrator.
A Microsoft Entra documentation page was updated: Search Editor.
A Microsoft Entra documentation page was updated: Service Support Administrator.
A Microsoft Entra documentation page was updated: Sharepoint Administrator.
A Microsoft Entra documentation page was updated: Sharepoint Embedded Administrator.
A Microsoft Entra documentation page was updated: Skype For Business Administrator.
A Microsoft Entra documentation page was updated: Teams Administrator.
A Microsoft Entra documentation page was updated: Teams Communications Administrator.
A Microsoft Entra documentation page was updated: Teams Communications Support Engineer.
A Microsoft Entra documentation page was updated: Teams Communications Support Specialist.
A Microsoft Entra documentation page was updated: Teams Devices Administrator.
A Microsoft Entra documentation page was updated: Teams Reader.
A Microsoft Entra documentation page was updated: Teams Telephony Administrator.
A Microsoft Entra documentation page was updated: Tenant Creator.
A Microsoft Entra documentation page was updated: User Experience Success Manager.
A Microsoft Entra documentation page was updated: Virtual Visits Administrator.
A Microsoft Entra documentation page was updated: Viva Glint Tenant Administrator.
A Microsoft Entra documentation page was updated: Viva Goals Administrator.
A Microsoft Entra documentation page was updated: Viva Pulse Administrator.
A Microsoft Entra documentation page was updated: Windows 365 Administrator.
A Microsoft Entra documentation page was updated: Windows Update Deployment Administrator.
A Microsoft Entra documentation page was updated: Yammer Administrator.
Learn about the recommendation to migrate application authentication from AD FS to Microsoft Entra ID
Learn about the Microsoft Entra recommendation to migrate to Microsoft Entra multifactor authentication from MFA server
Learn the importance of migrating your users to the Microsoft authenticator app in Microsoft Entra ID.
> | microsoft.azure.serviceHealth/allEntities/allTasks | Read and configure Azure Service Health |
> | microsoft.azure.serviceHealth/allEntities/allTasks | Read and configure Azure Service Health |
> | microsoft.directory/applications/authentication/update | Update authentication on all types of applications |
> | microsoft.directory/applications/authentication/update | Update authentication on all types of applications |
> | [Authentication Administrator](#authentication-administrator) | Can access to view, set and reset authentication method information for any non-admin user.<br/>[](privileged-roles-permissions.md) | c4e39bd9-1100-46d3-8c65-fb160da0071f |
For hybrid-joined devices, users must first authenticate with another method such as a password, smartcard or FIDO2 key, before using TAP to set up Windows Hello for Business.
> [!div class="mx-tableFixed"]
A Microsoft Entra documentation page was updated: Authentication Policy Administrator.
Learn about the recommendation to minimize multifactor authentication prompts from known devices in Microsoft Entra ID.
> [!div class="mx-tableFixed"]
How to download the audit, sign-in, and provisioning log data for manual storage in Microsoft Entra ID.
author: shlipsey3
A Microsoft Entra documentation page was updated: Attribute Log Administrator.
A Microsoft Entra documentation page was updated: Attribute Log Reader.
Learn how to customize the columns and filter of the Microsoft Entra activity logs so you can analyze the results.
Learn how to detect and resolve Microsoft Entra user accounts that are inactive or obsolete using the Microsoft Entra admin center and Microsoft Graph.
Learn how to use the Microsoft Entra recommendations to monitor and improve the health of your tenant.
Learn how to use Azure Monitor workbooks for Microsoft Entra ID, for analyzing identity related activity, trends, and gaps.
Users in this role can create and manage all aspects of environments, Power Apps, Flows, Data Loss Prevention policies. Additionally, users with this role have the ability to manage support tickets and monitor service health.
A Microsoft Entra documentation page was updated: Reports Reader.
Learn how to stream Microsoft Entra activity logs to an event hub for SIEM tool integration and analysis.
A Microsoft Entra documentation page was updated: Usage Summary Reports Reader.
Learn why you should migrate from the Azure Active Directory Authentication Library to the Microsoft Authentication Libraries.
Learn about the Microsoft Entra recommendation to migrate from Azure Active Directory Graph APIs to Microsoft Graph APIs.
> | Actions | Description |
author: shlipsey3
> | microsoft.directory/applications/audience/update | Update the audience property for applications |
> | microsoft.directory/applications/audience/update | Update the audience property for applications |
> | microsoft.directory/deletedItems.applications/delete | Permanently delete applications, which can no longer be restored |
>Get notified about when to revisit this page for updates by copying and pasting this URL: `https://learn.microsoft.com/api/search/rss?search=%22Release+notes+-+Azure+Active+Directory%22&locale=en-us` into your  feed reader.
Learn about the features and capabilities of the logs and reports in Microsoft Entra monitoring and health.
Learn how to create and work with Microsoft Entra workbooks, for identity monitoring, alerts, and data visualization.
> [!div class="mx-tableFixed"]
> [!div class="mx-tableFixed"]
A Microsoft Entra documentation page was updated: Directory Synchronization Accounts.
> | microsoft.directory/applications/policies/update | Update policies of applications |
A Microsoft Entra documentation page was updated: Cloud App Security Administrator.
A Microsoft Entra documentation page was updated: Azure Information Protection Administrator.
> | microsoft.directory/authorizationPolicy/standard/read | Read standard properties of authorization policy |
> | microsoft.directory/applications/synchronization/standard/read | Read provisioning settings associated with the application object |
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:division|String||
The default background image behind the sign-in box is changing later this year. The change is only to the image, requires no action, and doesn't affect any functionality. We know that the default background image is often used for training and documentation to demonstrate the sign-in experience. Providing the updated image allows you to update your documentation so you can demonstrate the exact sign-in experience that your users will see. For details on the upcoming change, see [Microsoft Entra releases and announcements](../fundamentals/whats-new.md).
A Microsoft Entra documentation page was updated: Organizational Branding Administrator.
Learn how you can protect your tenant by enabling the Insider Risk condition in Conditional Access integrated with Microsoft Purview Adaptive Protection.
> | microsoft.directory/namedLocations/create | Create custom rules that define network locations |
Learn how to troubleshoot sign-in errors using Microsoft Entra reports in the Microsoft Entra admin center
How to use the Sign-in diagnostic in tool Microsoft Entra ID to troubleshoot sign-in related scenarios.
A Microsoft Entra documentation page was updated: Identity Governance Administrator.
> | microsoft.directory/accessReviews/definitions/allProperties/read | Read all properties of access reviews of all reviewable resources in Microsoft Entra ID |
When they lose an access package assignment, then they're removed from all the resource roles in the access package.
When you create an access package, you can specify the request, approval and lifecycle settings, which are stored on the first policy of the access package. Most access packages have a single policy for users to request access, but a single access package can have multiple policies. You would create multiple policies for an access package if you want to allow different sets of users to be granted assignments with different request and approval settings.
>[!VIDEO https://learn-video.azurefd.net/vod/player?id=25c39e83-da3e-4f41-8d91-8b865b25b702]
:::image type="content" source="./media/entitlement-management-access-package-first/resource-roles.png" alt-text="Screenshot the shows how to select the member role." lightbox="./media/entitlement-management-access-package-first/resource-roles.png":::
> | microsoft.directory/accessReviews/definitions.groupsAssignableToRoles/create | Create access reviews for membership in groups that are assignable to Microsoft Entra roles |
1. Provide a rule for dynamic membership groups using the [membership rule builder](../identity/users/groups-dynamic-membership.md) or by clicking **Edit** on the rule syntax text box.
1. Select **Update**.
> | --- | --- |
A Microsoft Entra documentation page was updated: Entitlement Management Access Package Assignments.
> Other least privilege roles that can complete this task include the Catalog owner and the Access package manager.
A Microsoft Entra documentation page was updated: Entitlement Management Access Package Lifecycle Policy.
A Microsoft Entra documentation page was updated: Entitlement Management Access Package Manage Lifecycle.
manager: dougeby
A Microsoft Entra documentation page was updated: Entitlement Management Access Package Requests.
A Microsoft Entra documentation page was updated: Entitlement Management Access Package Settings.
A Microsoft Entra documentation page was updated: Lifecycle Workflow Audits.
manager: dougeby
> [!div class="mx-tableFixed"]
> [!div class="mx-tableFixed"]
A Microsoft Entra documentation page was updated: B2c Ief Policy Administrator.
A Microsoft Entra documentation page was updated: External Id User Flow Administrator.
A Microsoft Entra documentation page was updated: External Id User Flow Attribute Administrator.
Jason starts his assessment and signs in to [Microsoft Security Copilot](https://securitycopilot.microsoft.com/) or the Microsoft Entra admin center. In order to view application and service principal details, he signs in as at least a [Security Reader](/entra/identity/role-based-access-control/permissions-reference#security-reader) and needs an [Microsoft Entra role assignment](../identity/role-based-access-control/permissions-reference.md) of Application Administrator, Cloud Application Administrator, or similar Microsoft Entra administrator role that has permissions to manage application/workload identities in Microsoft Entra.
A Microsoft Entra documentation page was updated: Global Secure Access Administrator.
A Microsoft Entra documentation page was updated: Global Secure Access Log Reader.
