Microsoft Entra Built-in Roles
Doc updateThe reference now documents Resource Policy Administrator, Evaluator, and Reader roles, including their capabilities and role IDs.
Day in brief
Default agent-identity inactivity policy is now documented with custom-domain passkey details
The day’s meaningful updates center on two administrator-facing areas: Agent ID guidance now describes a default inactivity process across all tenants, including notifications and possible identity disabling, while Entra ID credential-management guidance adds custom URL-domain handling for authentication, API requests, returned links, and passkey registration. ID Governance guidance also connects access packages and sponsor-transition notifications to agent governance, and the built-in-role reference adds three resource-policy roles. The remaining updates are link or terminology corrections.
- Agent ID guidance details a default inactivity policy
Agent ID · AuthenticationThe guidance describes a default policy across all tenants: inactive agent identities are identified, relevant users are notified, and identities may be disabled if activity does not resume. It also updates sponsor lifecycle guidance and adds a PostgreSQL governance link.
- Credential Management API guidance adds custom-domain passkey handling
Entra ID · SecurityThe page now covers custom URL domains for authentication, API requests, returned links, and passkey registration, including the ability to override the WebAuthn relying-party ID. Administrators supporting external tenants should review application and passkey integrations against this guidance.
- Identity Governance guidance expands agent assignment and sponsor scenarios
ID Governance · FundamentalsThe overview now links additional AI agent governance scenarios, describes Lifecycle Workflows sponsor-transition notifications, and clarifies that entitlement-management access packages can govern agent identity assignments.
- Built-in-role reference adds three resource-policy roles
Entra ID · MonitoringThe reference now documents Resource Policy Administrator, Evaluator, and Reader roles, including their capabilities and role IDs. Administrators can use the entries to identify roles for managing, evaluating, or reading resource policies.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
6 updates
Microsoft Entra ID
2 updatesCredential Management Api
Doc updateThe documentation now explains how to use custom URL domains for authentication, API requests, returned links, and passkey registration, including overriding the WebAuthn relying-party ID.
Microsoft Entra Agent ID
2 updatesGoverning Agent Identities
New featureThe documentation adds a default inactivity policy for agent identities across all tenants. It explains that inactive identities are identified, relevant users are notified, and identities may be disabled when activity does not resume. It also updates sponsor lifecycle guidance and adds a PostgreSQL governance link.
Agent Id Governance Overview
Doc updateThe Agent ID governance overview documentation was updated to fix a link. Its description of the default inactivity policy remains unchanged.
Microsoft Entra ID Governance
2 updatesIdentity Governance Overview
Doc updateThe overview now links to additional AI agent governance scenarios, describes Lifecycle Workflows sponsor transition notifications, and clarifies that entitlement management access packages can govern agent identity assignments.
Identity Governance Overview
Doc updateThe page now correctly refers to “AI agents” and retains the link to “Governing agent identities.”