Microsoft Entra Archive

Microsoft Entra: Migrating GitHub Actions Federated Credentials to Immutable Subjects

Microsoft recently recommended migrating GitHub Actions federated credentials to an immutable subject format in Microsoft Entra app registrations. This closes a subtle security gap where recycled repo or org names could let someone else’s token match your trust configuration. In this post, I walk through what the migration actually involves. I also tested the newer Flexible Federated Identity Credentials (FFIC), currently in preview.

13. August 2026

The Microsoft 365 Admin Agent is now a Microsoft-managed agent

The Microsoft 365 Admin Agent is now generally available as a Microsoft-managed agent, giving all administrators with an Entra built-in role AI-powered access across the admin center and Copilot Chat. If you don’t need this agent, block it.

28. July 2026

Microsoft Entra

New admin role in Microsoft Entra: Entra SOC Identity Responder

Microsoft has introduced a new admin role: Entra SOC Identity Responder. The role lets SOC analysts disable accounts, revoke sessions, and reset passwords for rapid incident containment without broader Entra admin access.

19. July 2026

Microsoft Entra

New admin role in Microsoft Entra: Entra Customer Lockbox Approver

Microsoft is preparing a new Entra admin role. The Entra Customer Lockbox Approver role provides a least privileged option for approving Customer Lockbox requests in Azure.

10. June 2026

Microsoft Entra

Passkey changes in Microsoft Entra registration campaigns

Passkeys (FIDO2) are being added as a supported targeted authentication method in Microsoft Entra registration campaigns. In addition, tenants in the Microsoft-managed state that meet specific criteria will see additional configuration changes.

23. May 2026

Microsoft Entra / Microsoft Purview

Purview is now assigning workload admin roles in Microsoft Entra

Microsoft has started assigning the new Purview workload admin roles in Microsoft Entra, triggering PIM assignment notifications for administrators.

14. May 2026

Microsoft Entra

Microsoft-managed default app consent policy will block 8 additional permissions

Microsoft is updating the Microsoft-managed default user consent policy for Microsoft Graph as part of the Secure Future Initiative, requiring admin consent for an expanded set of delegated permissions accessing Exchange data.

13. May 2026

Microsoft Copilot / Microsoft Entra

New admin role in Microsoft Entra: AI Reader

A new AI Reader role in Microsoft Entra provides broad read-only access to Copilot and Agent 365 settings, usage reports, service health, and Entra ID objects.

19. April 2026

Microsoft Entra

Agent Registry is moving from Microsoft Entra to Agent 365

The Agent Registry is moving from Microsoft Entra to Agent 365 in the Microsoft 365 admin center on 1 May 2026, giving administrators a unified catalog of all agents across the organization. Also, the agent registry Graph API will soon be deprecated and replaced by a new Agent 365 API.

12. April 2026

Microsoft Entra

New admin role in Microsoft Entra: Customer Delegated Admin Relationship Administrator

A new Microsoft Entra admin role lets administrators manage granular delegated admin privilege (GDAP) relationships, including accepting, reviewing, and terminating partner access on behalf of the tenant.

3. April 2026

Microsoft Entra

New admin roles for Microsoft Entra Tenant Governance

Microsoft has added four new admin roles in Entra to manage all aspects of Microsoft Entra Tenant Governance. I am summarizing what each role covers and how they differ.

26. March 2026

Microsoft Copilot / Microsoft Entra

Update to the AI Administrator role in Microsoft 365

The AI Administrator role in Microsoft 365 and Entra now includes additional permissions for Agent 365, enabling AI Administrators to manage agents without involving a Global Administrator.

23. March 2026

Microsoft 365 / Microsoft Graph

SharePoint guest sharing and the error “Unable to get the link”

If you still have EnableAzureADB2BIntegration set to False and strict external collaboration settings in Microsoft Entra External ID in place, the upcoming SharePoint OTP retirement will prevent new guest sharing in your tenant. Here is what to expect and how to work around it using Microsoft Graph.

22. March 2026

English / Microsoft Entra

Microsoft Entra: “Revoke sessions” now invalidates all user sessions

The “Revoke Sessions” action in Microsoft Entra has been updated to invalidate all user sessions, regardless of whether MFA is enforced via Conditional Access or per-user policies.

8. March 2026

Englisch + German / English / Microsoft Entra

New Microsoft Entra admin roles for Teams and Entra External ID

Microsoft has published two new Entra admin roles: Teams External Collaboration Administrator and Authentication Extensibility Password Administrator, covering Teams External Collaboration settings and Just-In-Time password migration in Entra External ID.

7. February 2026

Englisch + German / English / Microsoft Copilot / Microsoft Entra

Yuwu9669P1: A suspicious Copilot Agent in Microsoft 365

An unknown Copilot agent named Yuwu9669P1 suddenly appeared in Microsoft 365 tenants without clear ownership or documentation. Admins should block this agent, as it is either suspicious or the result of a misdeployment.

27. January 2026

Englisch + German / English / Language / Microsoft Entra / Microsoft Purview

New Entra admin roles for Microsoft Purview, managed through Purview role assignments

Microsoft is rolling out three new Entra admin roles for Microsoft Purview that are automatically managed through Purview role assignments. These roles should not be assigned directly in Entra, as any manual changes will be overwritten.

20. December 2025

Englisch + German / English / Licensing / Microsoft 365 / Microsoft Copilot / Microsoft Entra

Licensing updates for Microsoft Cloud products – December 2025

Microsoft introduced several new licenses, changes to Dataverse storage, and fresh promotions for Microsoft 365 Copilot Business starting 1 December 2025.

2. December 2025

Englisch + German / English / Microsoft Entra

Entra ID now supports multi-device Passkeys for password managers like 1Password

Entra ID now supports multi-device passkeys, allowing users to store their passkey in password managers like 1Password for seamless, passwordless sign-in.

23. November 2025

Englisch + German / English / Microsoft Entra

New Microsoft Entra ID admin roles for SharePoint and Copilot Agent Administrators

Microsoft is rolling out four new Entra ID admin roles, covering SharePoint Advanced Management and the lifecycle of AI agents in Copilot.

16. November 2025

Tagged: Microsoft Entra

Microsoft Entra: Migrating GitHub Actions Federated Credentials to Immutable Subjects

The Microsoft 365 Admin Agent is now a Microsoft-managed agent

New admin role in Microsoft Entra: Entra SOC Identity Responder

New admin role in Microsoft Entra: Entra Customer Lockbox Approver

Passkey changes in Microsoft Entra registration campaigns

Purview is now assigning workload admin roles in Microsoft Entra

Microsoft-managed default app consent policy will block 8 additional permissions

New admin role in Microsoft Entra: AI Reader

Agent Registry is moving from Microsoft Entra to Agent 365

New admin role in Microsoft Entra: Customer Delegated Admin Relationship Administrator

New admin roles for Microsoft Entra Tenant Governance

Update to the AI Administrator role in Microsoft 365

Microsoft Entra: “Revoke sessions” now invalidates all user sessions

New Microsoft Entra admin roles for Teams and Entra External ID

Yuwu9669P1: A suspicious Copilot Agent in Microsoft 365

New Entra admin roles for Microsoft Purview, managed through Purview role assignments

Licensing updates for Microsoft Cloud products – December 2025

Entra ID now supports multi-device Passkeys for password managers like 1Password

New Microsoft Entra ID admin roles for SharePoint and Copilot Agent Administrators

RSS Reader