Saturday, 20 June 2026

How to revoke all access for a user in Microsoft Entra ID

Purview Workload Content Writer

Purview Workload Content Administrator

Purview Workload Content Reader

Describes the Microsoft Entra built-in roles and permissions.

Instructions about how to add an existing Azure subscription to your Microsoft Entra tenant.

Instructions about how to find Microsoft Entra ID and how to create a new tenant for your organization.

Starting February 2026, Microsoft Authenticator will block Entra credentials on jailbroken/rooted iOS and Android devices to enhance security. The rollout includes a warning phase followed by blocking. This feature is automatic, affects all users on such devices, and requires no admin action. Notify users and update documentation accordingly.

ID Protection analyzes signals about user accounts and calculates a risk score based on the probability that the user is compromised. If a user has risky user sign-in behavior, or their credentials were leaked, ID Protection uses these signals to calculate the user risk level. Administrators can configure risk-based Conditional Access policies to enforce access controls based on user risk, including requirements such as:

- It improves the accuracy of risk detection in [Microsoft Entra ID Protection risk detections](/entra/id-protection/concept-identity-protection-risks).

Microsoft Entra External ID pricing is based on monthly active users (MAU), which is the count of unique users with authentication activity within a calendar month. External ID consists of a core offer and premium add-ons. The Microsoft Entra External ID core offering is free for the first 50,000 MAU. For the latest information about usage billing and pricing, see [Billing model for Microsoft Entra External ID](../external-identities-pricing.md).

Learn about the pricing and billing structure for Microsoft Entra External ID, along with steps for linking an external tenant to an Azure subscription.

This series of exercises covers the fundamentals of Internet Access. The exercises assume that you follow them in order. If you skip around, you might miss a step. For example, in the baseline web-filtering tutorial, you create a security profile and assign it to a Microsoft Entra Conditional Access policy. Subsequent labs instruct you to assign the new policy to this existing security profile rather than creating a new security profile and Conditional Access policy each time.

- [Enable Global Secure Access signaling for Microsoft Entra ID and Microsoft Graph](how-to-source-ip-restoration.md#enable-global-secure-access-signaling-for-microsoft-entra-id-and-microsoft-graph)