Passkeys (FIDO2) will be added as a supported targeted authentication method in Microsoft Entra registration campaigns, with configuration changes applying to Microsoft-managed tenants that meet specific eligibility criteria.
Microsoft has started assigning the new Purview workload admin roles in Microsoft Entra, triggering PIM assignment notifications for administrators.
Microsoft is updating the Microsoft-managed default user consent policy for Microsoft Graph as part of the Secure Future Initiative, requiring admin consent for an expanded set of delegated permissions accessing Exchange data.
A new AI Reader role in Microsoft Entra provides broad read-only access to Copilot and Agent 365 settings, usage reports, service health, and Entra ID objects.
The Agent Registry is moving from Microsoft Entra to Agent 365 in the Microsoft 365 admin center on 1 May 2026, giving administrators a unified catalog of all agents across the organization. Also, the agent registry Graph API will soon be deprecated and replaced by a new Agent 365 API.
A new Microsoft Entra admin role lets administrators manage granular delegated admin privilege (GDAP) relationships, including accepting, reviewing, and terminating partner access on behalf of the tenant.
Microsoft has added four new admin roles in Entra to manage all aspects of Microsoft Entra Tenant Governance. I am summarizing what each role covers and how they differ.
The AI Administrator role in Microsoft 365 and Entra now includes additional permissions for Agent 365, enabling AI Administrators to manage agents without involving a Global Administrator.
If you still have EnableAzureADB2BIntegration set to False and strict external collaboration settings in Microsoft Entra External ID in place, the upcoming SharePoint OTP retirement will prevent new guest sharing in your tenant. Here is what to expect and how to work around it using Microsoft Graph.
The “Revoke Sessions” action in Microsoft Entra has been updated to invalidate all user sessions, regardless of whether MFA is enforced via Conditional Access or per-user policies.
Microsoft has published two new Entra admin roles: Teams External Collaboration Administrator and Authentication Extensibility Password Administrator, covering Teams External Collaboration settings and Just-In-Time password migration in Entra External ID.
An unknown Copilot agent named Yuwu9669P1 suddenly appeared in Microsoft 365 tenants without clear ownership or documentation. Admins should block this agent, as it is either suspicious or the result of a misdeployment.
Microsoft is rolling out three new Entra admin roles for Microsoft Purview that are automatically managed through Purview role assignments. These roles should not be assigned directly in Entra, as any manual changes will be overwritten.
Microsoft introduced several new licenses, changes to Dataverse storage, and fresh promotions for Microsoft 365 Copilot Business starting 1 December 2025.
Entra ID now supports multi-device passkeys, allowing users to store their passkey in password managers like 1Password for seamless, passwordless sign-in.
Microsoft is rolling out four new Entra ID admin roles, covering SharePoint Advanced Management and the lifecycle of AI agents in Copilot.
Microsoft has expanded the Microsoft-managed default app consent policy in Entra ID to block 20 additional permissions, including access to Outlook Mail, Outlook Calendar, and Teams data
Microsoft has added two new Entra ID admin roles — SharePoint Backup Administrator and Exchange Backup Administrator. These roles allow organizations to delegate Microsoft 365 Backup tasks without relying on SharePoint, Exchange, or Global admins.
In this post, I walk you through how to create and customize a custom app consent policy in Entra ID using the Microsoft Graph API.
Microsoft has added a new built-in admin role in Entra ID: Organizational Data Source Administrator