Daily.Entra.News130 changes were tracked across 5 Microsoft Entra products. The leading updates include Microsoft Entra Conditional Access optimization agent with Microsoft Security Copilot; Microsoft Entra ID attestation for FIDO2 security key vendors; Cloud App Security Administrator.
A Microsoft Entra documentation page was updated: Microsoft 365 Migration Administrator.
After enabling this feature, existing userPrincipalName values remain as-is. On next change of the userPrincipalName attribute on-premises, the normal delta sync on users updates the UPN. Once this feature is enabled, it's not possible to disable it.
Template ID: d24aef57-1500-4070-84db-2666f29cf966
Billing Administrator
Cloud Device Administrator
Compliance Administrator
Compliance Data Administrator
Customer LockBox Access Approver
Network Administrator
Office Apps Administrator
Organizational Messages Approver
Organizational Messages Writer
A Microsoft Entra documentation page was updated: Ai Administrator.
A Microsoft Entra documentation page was updated: Attack Payload Author.
A Microsoft Entra documentation page was updated: Attack Simulation Administrator.
A Microsoft Entra documentation page was updated: Attribute Assignment Administrator.
A Microsoft Entra documentation page was updated: Attribute Assignment Reader.
A Microsoft Entra documentation page was updated: Attribute Definition Administrator.
A Microsoft Entra documentation page was updated: Attribute Definition Reader.
A Microsoft Entra documentation page was updated: Azure Devops Administrator.
A Microsoft Entra documentation page was updated: Desktop Analytics Administrator.
A Microsoft Entra documentation page was updated: Directory Readers.
A Microsoft Entra documentation page was updated: Directory Writers.
A Microsoft Entra documentation page was updated: Domain Name Administrator.
Dynamics 365 Administrator
A Microsoft Entra documentation page was updated: Dynamics 365 Business Central Administrator.
A Microsoft Entra documentation page was updated: Edge Administrator.
A Microsoft Entra documentation page was updated: Exchange Administrator.
A Microsoft Entra documentation page was updated: Exchange Recipient Administrator.
A Microsoft Entra documentation page was updated: Extended Directory User Administrator.
A Microsoft Entra documentation page was updated: Fabric Administrator.
A Microsoft Entra documentation page was updated: Global Administrator.
A Microsoft Entra documentation page was updated: Global Reader.
A Microsoft Entra documentation page was updated: Groups Administrator.
A Microsoft Entra documentation page was updated: Guest Inviter.
A Microsoft Entra documentation page was updated: Helpdesk Administrator.
A Microsoft Entra documentation page was updated: Hybrid Identity Administrator.
A Microsoft Entra documentation page was updated: Insights Administrator.
A Microsoft Entra documentation page was updated: Insights Analyst.
A Microsoft Entra documentation page was updated: Insights Business Leader.
A Microsoft Entra documentation page was updated: Intune Administrator.
A Microsoft Entra documentation page was updated: Iot Device Administrator.
A Microsoft Entra documentation page was updated: Kaizala Administrator.
A Microsoft Entra documentation page was updated: Knowledge Administrator.
A Microsoft Entra documentation page was updated: Knowledge Manager.
A Microsoft Entra documentation page was updated: License Administrator.
A Microsoft Entra documentation page was updated: Message Center Privacy Reader.
A Microsoft Entra documentation page was updated: Message Center Reader.
A Microsoft Entra documentation page was updated: Microsoft 365 Backup Administrator.
A Microsoft Entra documentation page was updated: Microsoft Entra Joined Device Local Administrator.
A Microsoft Entra documentation page was updated: Microsoft Graph Data Connect Administrator.
A Microsoft Entra documentation page was updated: Microsoft Hardware Warranty Administrator.
A Microsoft Entra documentation page was updated: Microsoft Hardware Warranty Specialist.
A Microsoft Entra documentation page was updated: Organizational Data Source Administrator.
A Microsoft Entra documentation page was updated: Partner Tier1 Support.
A Microsoft Entra documentation page was updated: Partner Tier2 Support.
A Microsoft Entra documentation page was updated: People Administrator.
A Microsoft Entra documentation page was updated: Permissions Management Administrator.
A Microsoft Entra documentation page was updated: Permissions Reference.
A Microsoft Entra documentation page was updated: Printer Administrator.
A Microsoft Entra documentation page was updated: Printer Technician.
A Microsoft Entra documentation page was updated: Privileged Role Administrator.
A Microsoft Entra documentation page was updated: Search Administrator.
A Microsoft Entra documentation page was updated: Search Editor.
A Microsoft Entra documentation page was updated: Service Support Administrator.
A Microsoft Entra documentation page was updated: Sharepoint Administrator.
A Microsoft Entra documentation page was updated: Sharepoint Embedded Administrator.
A Microsoft Entra documentation page was updated: Skype For Business Administrator.
A Microsoft Entra documentation page was updated: Teams Administrator.
A Microsoft Entra documentation page was updated: Teams Communications Administrator.
A Microsoft Entra documentation page was updated: Teams Communications Support Engineer.
A Microsoft Entra documentation page was updated: Teams Communications Support Specialist.
A Microsoft Entra documentation page was updated: Teams Devices Administrator.
A Microsoft Entra documentation page was updated: Teams Reader.
A Microsoft Entra documentation page was updated: Teams Telephony Administrator.
A Microsoft Entra documentation page was updated: Tenant Creator.
A Microsoft Entra documentation page was updated: User Administrator.
A Microsoft Entra documentation page was updated: User Experience Success Manager.
A Microsoft Entra documentation page was updated: Virtual Visits Administrator.
A Microsoft Entra documentation page was updated: Viva Glint Tenant Administrator.
A Microsoft Entra documentation page was updated: Viva Goals Administrator.
A Microsoft Entra documentation page was updated: Viva Pulse Administrator.
A Microsoft Entra documentation page was updated: Windows 365 Administrator.
A Microsoft Entra documentation page was updated: Windows Update Deployment Administrator.
A Microsoft Entra documentation page was updated: Yammer Administrator.
> New Microsoft Entra Connect Sync Versions are only available via the Microsoft Entra admin center
- To view the Microsoft Entra audit logs, you need at least the [Reports reader](../../identity/role-based-access-control/permissions-reference.md#reports-reader) role.
author: barclayn
A Microsoft Entra documentation page was updated: Attribute Log Administrator.
A Microsoft Entra documentation page was updated: Attribute Log Reader.
Users in this role can create and manage all aspects of environments, Power Apps, Flows, Data Loss Prevention policies. Additionally, users with this role have the ability to manage support tickets and monitor service health.
A Microsoft Entra documentation page was updated: Reports Reader.
A Microsoft Entra documentation page was updated: Usage Summary Reports Reader.
A Microsoft Entra documentation page was updated: Authentication Administrator.
A Microsoft Entra documentation page was updated: Authentication Extensibility Administrator.
A Microsoft Entra documentation page was updated: Authentication Policy Administrator.
A Microsoft Entra documentation page was updated: Privileged Authentication Administrator.
A Microsoft Entra documentation page was updated: Password Administrator.
Cloud App Security Administrator
A Microsoft Entra documentation page was updated: Security Administrator.
A Microsoft Entra documentation page was updated: Security Operator.
A Microsoft Entra documentation page was updated: Security Reader.
A Microsoft Entra documentation page was updated: Azure Information Protection Administrator.
Cloud Application Administrator
After disabling or restricting user consent, you have several important steps to take to help keep your organization secure as you continue to allow business-critical applications to be used. These steps are crucial to minimize impact on your organization's support team and IT administrators, and to help prevent the use of unmanaged accounts in non-Microsoft applications.
A Microsoft Entra documentation page was updated: Application Administrator.
A Microsoft Entra documentation page was updated: Attribute Provisioning Administrator.
A Microsoft Entra documentation page was updated: Attribute Provisioning Reader.
A Microsoft Entra documentation page was updated: Directory Synchronization Accounts.
manager: mwongerapk
Learn how to use advanced certificate signing options in the SAML token for preintegrated apps in Microsoft Entra ID
Microsoft Entra ID has a gallery that contains thousands of preintegrated applications that use SSO. This article uses an enterprise application named **Microsoft Entra SAML Toolkit 1** as an example, but the concepts apply for most preconfigured enterprise applications in the Microsoft Entra application gallery.
The Microsoft Entra Conditional Access optimization agent provides suggestions for your Conditional Access policies. The suggestions vary based on what the agent finds. As the administrator, you need to review the suggestions and decide what to do.
Conditional Access Administrator
This topic covers how to manage hardware oath tokens in Microsoft Entra ID, including Microsoft Graph APIs that you can use to upload, activate, and assign hardware OATH tokens.
A Microsoft Entra documentation page was updated: Application Developer.
Organizational Branding Administrator
Explains requirements to prepare FIDO2 hardware for attestation with Microsoft Entra ID
A Microsoft Entra documentation page was updated: Identity Governance Administrator.
A Microsoft Entra documentation page was updated: Lifecycle Workflows Administrator.
The visibility change will only impact how end-users can discover access packages via the "Available" tab, the "View all" option, or when using the search bar within these sections to find requestable access packages. The change won't impact the visibility logic for other tabs like "Suggested," "Active," or "Expired" (even when using search within those tabs), nor does it impact other My Access portal sections such as "Request history" or "Approvals."
A Microsoft Entra documentation page was updated: B2c Ief Keyset Administrator.
A Microsoft Entra documentation page was updated: B2c Ief Policy Administrator.
A Microsoft Entra documentation page was updated: External Id User Flow Administrator.
A Microsoft Entra documentation page was updated: External Id User Flow Attribute Administrator.
A Microsoft Entra documentation page was updated: External Identity Provider Administrator.
Create an enterprise application using the client ID for a multitenant application.
A Microsoft Entra documentation page was updated: Global Secure Access Administrator.
A Microsoft Entra documentation page was updated: Global Secure Access Log Reader.
The Conditional Access optimization agent helps you ensure all users and applications are protected by Conditional Access policies. It recommends policies and changes based on best practices aligned with [Zero Trust](/security/zero-trust/deploy/identity) and Microsoft's learnings.
