← Previous day

Day in brief

Entra guidance defines a shared default limit of 700 role and scope definitions

The period’s substantive update is consolidated guidance across Entra ID and Workload ID: app roles and exposed delegated permission scopes share a default limit of 700 definitions per application or service principal. Disabled definitions count toward that limit, which is separate from the aggregate manifest limit; another update lists that aggregate limit as 1,200 collection entries.

  • The App Manifest guidance states that app roles and exposed delegated permission scopes share a default limit of 700 definitions per application or service principal. Disabled definitions count, and the limit is separate from the aggregate manifest limit.

  • Supported Accounts Validation now lists an aggregate manifest limit of 1,200 collection entries, alongside the shared 700-definition limit for app roles and exposed delegated scopes.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

4 updates

1

Add app roles and get them from a token

Doc update

The page now documents a shared default limit of 700 app roles and exposed delegated permission scopes per application or service principal, including counting rules, existing objects above the limit, and design guidance.

1

Supported Accounts Validation

Doc update

The documentation now lists a default limit of 700 shared permission definitions for app roles and exposed delegated scopes, plus an aggregate manifest limit of 1,200 collection entries.

2

App Manifest

Doc update

The documentation now states that app roles and exposed delegated permission scopes share a default limit of 700 permission definitions per application or service principal. Disabled definitions count, and this limit is separate from the aggregate manifest limit.

Microsoft Graph App Manifest

Doc update

The documentation now states that app roles and exposed delegated permission scopes share a default limit of 700 definitions per application or service principal. Disabled definitions count, and this limit is separate from the aggregate manifest limit.

Daily Entra.News

Get daily email updates

Get a concise summary of the latest Microsoft Entra updates delivered straight to your inbox.

Loading the secure signup form…