Daily.Entra.News33 changes were tracked across 5 Microsoft Entra products. The leading updates include Security Copilot Entra Proof Of Concept; Create New Tenant; Troubleshoot the Global Secure Access mobile client with Health check utility.
Learn how to configure single sign-on between Microsoft Entra ID and KnowledgeOwl.
Learn how to configure single sign-on between Microsoft Entra ID and Veza.
- You make a change to proxyAddresses or userPrincipalName.
- If no domain hint or policies are assigned, default HRD behavior applies.
- Nested OUs are supported (that is, you **can** sync an OU that has 130 nested OUs, but you **can't** sync 60 separate OUs in the same configuration).
- Completion of the steps in [Quickstart: Create and assign a user account](add-application-portal-assign-users.md).
For instance, if an application is found to be non-compliant with company policies, an administrator might choose to 'Block' it. Conversely, if an application is legitimate but requires further review, the administrator may opt to 'Deny' the request temporarily while seeking more information.
- **Delegated administration**: Select one or more Microsoft Entra built-in roles and assign them to a role assignable security group in the governing tenant. Members of this group can use their governing tenant credentials to sign in to the governed tenant without needing an account in the governed tenant. Each group can have multiple role assignments, and each policy template can have multiple groups defined.
- **Provisioning** - Microsoft Entra ID to SaaS [application provisioning](~/identity/app-provisioning/user-provisioning.md) refers to automatically creating user identities and roles in the SaaS applications that users need access to.
The following document will guide you through configuring Microsoft Entra Cloud Sync for provisioning groups from Microsoft Entra ID to Active Directory. If you are looking for information on provisioning from AD to Microsoft Entra ID, see [Configure - Provisioning Active Directory to Microsoft Entra ID using Microsoft Entra Cloud Sync](how-to-configure.md).
| Feature | Free | Microsoft Entra P1 | Microsoft Entra P2 | Microsoft Entra ID Governance |
This article focuses exclusively on:
1. Select **Terminate governance**.
- Cross-tenant delegated administration roles - Specify which Microsoft Entra built-in roles users from the governing tenant have in the governed tenant.
This article describes how to update an existing governance relationship between a governing tenant and a governed tenant. You might need to update a governance relationship to add or modify delegated administration roles or multitenant application configurations.
1. Configure the template:
| Scenario | Description |
- [Configuration management](configuration-management.md)
- [Set up a governance relationship](how-to-set-up-governance-relationship.md)
- [Monitor governing tenant admin activity](how-to-monitor-governing-activity.md)
- [Review the list of related tenants](related-tenants.md) surfaced by discovery.
- [Use cross-tenant delegated administration](how-to-delegated-administration.md)
- [Create a monitor](how-to-create-monitor.md)
- [Create a monitor](how-to-create-monitor.md)
- Automatically detect tenants that are related to your tenant based on one or more discovery signals.
- Investigate ownership (business unit, team, or developer).
Learn how to enable continuous access evaluation for workload identities to enforce Conditional Access policies and instantly revoke tokens.
Learn if a device can communicate with the Global Secure Access service and tunnel traffic, by using the health check utility.
A Microsoft Entra documentation page was updated: Troubleshoot Global Secure Access Client Ios Health Check Utility.
