Lifecycle Workflows documentation now covers group sensitivity-label visibility; Entra ID clarifies Group.Read.All for Health Alert Notifications

The week of 10 November was primarily documentation maintenance, with two substantive points for administrators. ID Governance published and updated guidance explaining that Lifecycle Workflows can show a group’s Microsoft Purview Information Protection sensitivity labels while workflow tasks are created or edited. Entra ID’s Health Alert Notifications guidance identifies Group.Read.All as the least-privileged permission needed to view groups. The other edits refine instructions for reprocessing workflow runs, External ID Akamai and Cloudflare WAF integrations, and Global Secure Access domain controllers. The supplied evidence shows no preview, general-availability, retirement, Message Center announcement, or confirmed tenant-wide behavior change; the new page should not be treated as a launch notice.

• ID GovernanceSensitivity labels in Lifecycle Workflows

  A new article, alongside a related update, describes viewing Microsoft Purview Information Protection sensitivity labels for groups during workflow-task creation and editing. This is new or expanded documentation of the task experience; the record does not establish a new feature release, preview, or general availability status.

• Entra IDLeast-privilege permission clarified for Health Alert Notifications

  The updated configuration guidance explicitly names Group.Read.All as the least-privileged permission required to view groups. This is a security and permissions clarification, not evidence that the underlying permission model changed; administrators can use it as the documented baseline when reviewing the configuration.

• External IDAkamai and Cloudflare WAF integration guidance refined

  The Akamai integration page now includes a reference to an external tenant, and the Cloudflare WAF guidance stresses testing after the WAF is connected to Microsoft Entra External ID. These are integration-procedure clarifications; no availability or behavior change is stated.

• ID GovernanceLifecycle Workflows reprocessing instructions updated

  The reprocessing article was updated to guide users through reprocessing workflow runs. The supplied summary gives no new eligibility, execution behavior, or rollout information, so this is an ordinary procedural documentation update.

• Global Secure AccessGlobal Secure Access domain-controller guide calls out Client IP address

  The Configure Domain Controllers page was updated with a Client IP address item. Because the record does not say whether this is a new input, requirement, or correction, administrators should not infer a configuration change from the edit alone.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.