Saturday, 1 August 2026

Organizations are increasingly modernizing identity, access, and device management by reducing their dependence on on-premises Active Directory and adopting cloud-native capabilities in Microsoft Entra ID. Whether the goal is complete Active Directory retirement or a smaller, more secure on-premises footprint, this guidance helps you plan and execute that transformation.

Learn about Microsoft Entra tenant architecture for collaborating production tenants so that you can identify your needs and compare architectural options.

Learn about Microsoft Entra tenant architecture for nonproduction environments so that you can identify your needs and compare architectural options.

Learn about Microsoft Entra tenant architecture for primary production tenants so that you can identify your needs and compare architectural options.

Learn how to compose your Microsoft Entra tenant estate from common tenant architecture patterns so that you can meet your requirements with as few tenants as possible.

Learn about Microsoft Entra tenant architecture for business partner access so that you can identify your needs and compare architectural options.

Learn about Microsoft Entra tenant architecture for critical business systems so that you can identify your needs and compare architectural options.

Learn about Microsoft Entra tenant architecture for hybrid identity and isolation so that you can identify your needs and compare architectural options.

Instructions about how to find Microsoft Entra ID and how to create a new tenant for your organization.

> [!NOTE]

Learn how to create configuration snapshots in Microsoft Entra Tenant Governance to capture tenant configuration for baselines or audit evidence

Learn how to view monitor results and configuration drifts and manage configuration monitors in Microsoft Entra Tenant Governance

Learn how to create a configuration monitor in Microsoft Entra Tenant Governance to evaluate a tenant against a configuration baseline and report drift

This article walks you through managing unsponsored guests using the **Unsponsored guest cleanup (Preview)** workflow template.

Learn how to deploy Microsoft Entra Tenant Governance from setup through tenant discovery, governance, and configuration monitoring

Learn how to assign or remove the application permissions and roles that the Tenant Configuration Management service uses to create snapshots and run monitors

Learn how to securely create a governed Microsoft Entra workforce tenant and establish governance from your home tenant.

When you create a new Microsoft Entra tenant using the secure add-on tenant creation feature, you're prompted to select an existing subscription and resource group from your billing account. When you create your new tenant, Microsoft generates a new billing asset called **Entra ID Free** under that subscription and resource group, which links to the newly created tenant.

Learn how to configure Microsoft Entra Internet Access and Microsoft Defender for Cloud Apps side by side without proxying traffic twice.