MODIFIED docs/id-governance/tenant-governance/governance-policy-templates.md

Modified by Ken Withee on Jul 1, 2026 4:54 PM
📖 View on learn.microsoft.com

+12 / -1 lines changed

Commit: Document Tenant Governance policy template limits

Changes:

Before

After

titleSuffix: Microsoft Entra ID Governance
description: Learn about governance policy templates and how to use them to enforce consistent governance across tenants in Microsoft Entra
ms.topic: concept-article
ms.date: 03/10/2026
---
 
<!-- source: Governance policy templates.docx -->
 
- **Configuration required**: You must configure the default policy template before you can use it.
 
## Related content
 
- [Governance relationships](governance-relationships.md)

titleSuffix: Microsoft Entra ID Governance
description: Learn about governance policy templates and how to use them to enforce consistent governance across tenants in Microsoft Entra
ms.topic: concept-article
ms.date: 07/01/2026
ai-usage: ai-assisted
---
 
<!-- source: Governance policy templates.docx -->
 
- **Configuration required**: You must configure the default policy template before you can use it.
 
## Limitations
 
The following limitations apply to governance policy templates:
 
| Limit | Value |
| --- | --- |
| Maximum number of multitenant applications per template | 10 |
| Maximum number of permissions per multitenant application | 100 |
| Maximum number of role assignments per template | 10 |

MODIFIED docs/identity/role-based-access-control/permissions-reference.md

Modified by FaithOmbongi on Jul 1, 2026 1:43 PM
📖 View on learn.microsoft.com

+1 / -6 lines changed

Commit: Removed Entra Customer Lockbox Approver - Removed role and actions until the team give the go-ahead.

Changes:

Before

After

title: Microsoft Entra built-in roles
description: Describes the Microsoft Entra built-in roles and permissions.
ms.topic: reference
ms.date: 06/30/2026
ms.reviewer: abhijeetsinha
ms.custom: generated, it-pro, fasttrack-edit, has-azure-ad-ps-ref, azure-ad-ref-level-one-done, sfi-ga-nochange
---
> | [Edge Administrator](#edge-administrator) | Manage all aspects of Microsoft Edge. | 3f1acade-1e04-4fbc-9b69-f0302cd84aef |
> | [Entra Backup Administrator](#entra-backup-administrator) | Manage all aspects of Microsoft Entra Backup, such as create recovery jobs and manage backup snapshots. | b6a27b2b-f905-4b2e-81b5-0d90e0ef1fdb |
> | [Entra Backup Reader](#entra-backup-reader) | Read all aspects of Microsoft Entra Backup, such as list all preview jobs, recovery jobs, backup snapshots, and create preview jobs. | f42252d9-5400-4d7b-b9ef-cc582dbb8577 |
> | [Entra Customer Lockbox Approver](#entra-customer-lockbox-approver) | Can approve customer lockbox requests for accessing customer data in Entra ID. | d35481f7-cda1-4fa2-8344-5a21f7f3724d |
> | [Exchange Administrator](#exchange-administrator) | Can manage all aspects of the Exchange product. | 29232cdf-9323-42fd-ade2-1d097af3e4de |
> | [Exchange Backup Administrator](#exchange-backup-administrator) | Back up and restore content (including granular restore) for Exchange in Microsoft 365 Backup | 49eb8f75-97e9-4e37-9b2b-6c3ebfcffa31 |
> | [Exchange Recipient Administrator](#exchange-recipient-administrator) | Can create or update Exchange Online recipients within the Exchange Online organization. | 31392ffb-586c-42d1-9346-e59415a2cc4e |
 
[!INCLUDE [entra-backup-reader](includes/entra-backup-reader.md)]
 
## Entra Customer Lockbox Approver
 
[!INCLUDE [entra-customer-lockbox-approver](includes/entra-customer-lockbox-approver.md)]

title: Microsoft Entra built-in roles
description: Describes the Microsoft Entra built-in roles and permissions.
ms.topic: reference
ms.date: 07/01/2026
ms.reviewer: abhijeetsinha
ms.custom: generated, it-pro, fasttrack-edit, has-azure-ad-ps-ref, azure-ad-ref-level-one-done, sfi-ga-nochange
---
> | [Edge Administrator](#edge-administrator) | Manage all aspects of Microsoft Edge. | 3f1acade-1e04-4fbc-9b69-f0302cd84aef |
> | [Entra Backup Administrator](#entra-backup-administrator) | Manage all aspects of Microsoft Entra Backup, such as create recovery jobs and manage backup snapshots. | b6a27b2b-f905-4b2e-81b5-0d90e0ef1fdb |
> | [Entra Backup Reader](#entra-backup-reader) | Read all aspects of Microsoft Entra Backup, such as list all preview jobs, recovery jobs, backup snapshots, and create preview jobs. | f42252d9-5400-4d7b-b9ef-cc582dbb8577 |
> | [Exchange Administrator](#exchange-administrator) | Can manage all aspects of the Exchange product. | 29232cdf-9323-42fd-ade2-1d097af3e4de |
> | [Exchange Backup Administrator](#exchange-backup-administrator) | Back up and restore content (including granular restore) for Exchange in Microsoft 365 Backup | 49eb8f75-97e9-4e37-9b2b-6c3ebfcffa31 |
> | [Exchange Recipient Administrator](#exchange-recipient-administrator) | Can create or update Exchange Online recipients within the Exchange Online organization. | 31392ffb-586c-42d1-9346-e59415a2cc4e |
 
[!INCLUDE [entra-backup-reader](includes/entra-backup-reader.md)]
 
## Exchange Administrator
 
[!INCLUDE [exchange-administrator](includes/exchange-administrator.md)]
 

MODIFIED docs/identity/role-based-access-control/includes/global-administrator.md

Modified by FaithOmbongi on Jul 1, 2026 1:43 PM
📖 View on learn.microsoft.com

+1 / -2 lines changed

Commit: Removed Entra Customer Lockbox Approver - Removed role and actions until the team give the go-ahead.

Changes:

Before

After

title: Global Administrator
description: Global Administrator
ms.topic: include
ms.date: 06/30/2026
ms.custom: include file
---
 
> | microsoft.directory/hybridAuthenticationPolicy/allProperties/allTasks | Manage hybrid authentication policy in Microsoft Entra ID<br/>[![Privileged label icon.](../media/permissions-reference/privileged-label.png)](../privileged-roles-permissions.md) |
> | microsoft.directory/identityProtection/allProperties/allTasks | Create and delete all resources, and read and update standard properties in Microsoft Entra ID Protection<br/>[![Privileged label icon.](../media/permissions-reference/privileged-label.png)](../privileged-roles-permissions.md) |
> | microsoft.directory/lifecycleWorkflows/workflows/allProperties/allTasks | Manage all aspects of lifecycle workflows and tasks in Microsoft Entra ID |
> | microsoft.directory/lockbox/requests/update | Update Customer Lockbox requests for Microsoft Entra resources |
> | microsoft.directory/loginOrganizationBranding/allProperties/allTasks | Create and delete loginTenantBranding, and read and update all properties |
> | microsoft.directory/multiTenantOrganization/basic/update | Update basic properties of a multi-tenant organization |
> | microsoft.directory/multiTenantOrganization/create | Create a multi-tenant organization |

title: Global Administrator
description: Global Administrator
ms.topic: include
ms.date: 07/01/2026
ms.custom: include file
---
 
> | microsoft.directory/hybridAuthenticationPolicy/allProperties/allTasks | Manage hybrid authentication policy in Microsoft Entra ID<br/>[![Privileged label icon.](../media/permissions-reference/privileged-label.png)](../privileged-roles-permissions.md) |
> | microsoft.directory/identityProtection/allProperties/allTasks | Create and delete all resources, and read and update standard properties in Microsoft Entra ID Protection<br/>[![Privileged label icon.](../media/permissions-reference/privileged-label.png)](../privileged-roles-permissions.md) |
> | microsoft.directory/lifecycleWorkflows/workflows/allProperties/allTasks | Manage all aspects of lifecycle workflows and tasks in Microsoft Entra ID |
> | microsoft.directory/loginOrganizationBranding/allProperties/allTasks | Create and delete loginTenantBranding, and read and update all properties |
> | microsoft.directory/multiTenantOrganization/basic/update | Update basic properties of a multi-tenant organization |
> | microsoft.directory/multiTenantOrganization/create | Create a multi-tenant organization |
 

MODIFIED docs/identity/saas-apps/harness-provisioning-tutorial.md

Modified by Jeevan Desarda on Jul 1, 2026 8:20 PM
📖 View on learn.microsoft.com

+0 / -2 lines changed

Commit: Remove preview label from Harness provisioning tutorial

Changes:

Before

After

 
> [!NOTE]
> This article describes a connector that is built on top of the Microsoft Entra user provisioning service. For information about this service, see [Automate user provisioning and deprovisioning to SaaS applications with Microsoft Entra ID](~/identity/app-provisioning/user-provisioning.md).
>
> This connector is currently in preview. For more information about previews, see [Universal License Terms For Online Services](https://www.microsoft.com/licensing/terms/product/ForOnlineServices/all).
 
 
## Prerequisites

 
> [!NOTE]
> This article describes a connector that is built on top of the Microsoft Entra user provisioning service. For information about this service, see [Automate user provisioning and deprovisioning to SaaS applications with Microsoft Entra ID](~/identity/app-provisioning/user-provisioning.md).
 
## Prerequisites

MODIFIED docs/identity/conditional-access/reference-office-365-application-contents.md

Modified by Ken Withee on Jul 1, 2026 7:01 PM
📖 View on learn.microsoft.com

+1 / -1 lines changed

Commit: Update link format for Microsoft applications in reports

Changes:

Before

After

- [Office 365 app in Conditional Access](concept-conditional-access-cloud-apps.md#office-365)
- [Service dependencies in Conditional Access](service-dependencies.md)
- [What is Conditional Access?](overview.md)
- [Verify first-party Microsoft applications in sign-in reports](https://learn.microsoft.com/troubleshoot/azure/entra/entra-id/governance/verify-first-party-apps-sign-in)

- [Office 365 app in Conditional Access](concept-conditional-access-cloud-apps.md#office-365)
- [Service dependencies in Conditional Access](service-dependencies.md)
- [What is Conditional Access?](overview.md)
- [Verify first-party Microsoft applications in sign-in reports](/troubleshoot/azure/entra/entra-id/governance/verify-first-party-apps-sign-in)

📋 Microsoft Entra Documentation Changes

📊 Summary

📝 Modified Documentation Files

🗑️ Deleted Documentation Files