Saturday, 1 November 2025

**Type:** New feature

A Microsoft Entra documentation page was updated: Zero Trust Protect Identities.

A Microsoft Entra documentation page was updated: Whats New.

|Workday Writeback | ✅ |

To identify Intune device compliance and app protection policies, the agent must be running as a Global Administrator or Conditional Access Administrator AND Global Reader. Conditional Access Administrator isn't sufficient on its own for the agent to produce Intune suggestions.

ai-usage: ai-assisted

Workflows by default, unless specified during creation, are managed by users with either the Lifecycle Workflows, or Global, administrator roles. As workflows grow and change to meet the needs of members of your organization, so does the need to limit who can manage them. With delegated workflow management, you can scope management of workflows using [Administrative Units](../identity/role-based-access-control/administrative-units.md). When scoped, specific admins are only granted access to manage specific workflows. Scoping allows for greater security within your environment by following Microsoft's least privileged access guidelines by only giving access to specifically what's needed.

This article discusses how to use Custom Attribute Triggers as an attribute change trigger within a workflow in Lifecycle Workflows.

7. Update the desired properties.

> Branding themes for applications are currently in PREVIEW.

author: kenwith