Thursday, 5 June 2025

Microsoft Entra ID Governance allows you to balance your organization's need for security and employee productivity with the right processes and visibility. You can use entitlement management and other identity governance features to enforce the policies for access.

Describes how to check the users who fall into the execution scope of a Lifecycle Workflow.

Planning for a successful access reviews campaign for a particular application includes identifying if any users in that application have access that doesn't derive from Microsoft Entra ID.

Planning for a successful access reviews campaign for a particular application includes identifying if any users in that application have access that doesn't derive from Microsoft Entra ID. If the application does not support provisioning, then you will need to create application role assignments for the application, and supply the list of changes when a review completes.

Learn how to set up group writeback in entitlement management.

>

Describes overview of identity provisioning and the ILM scenarios.

author: justinha

author: MicrosoftGuyJFlo

* Enable your users to be automatically signed-in to my.sdworx.com with their Microsoft Entra accounts.

| February | 99.999% | 99.999% | 99.999% | 99.999% | 99.998% |

> If you have a highly locked-down and restricted environment, you need to add more URLs than the URLs the table lists for Internet Explorer enhanced security. Also add URLs that are listed in the table in the next section.

Discovery and insights (formerly Security Wizard) help you convert permanent Microsoft Entra role assignments to just-in-time assignments with Privileged Identity Management.

Microsoft Entra ID Governance allows you to balance your organization's need for security and employee productivity with the right processes and visibility. You can define policies for how users should obtain access to your business critical applications integrated with Microsoft Entra ID Governance.

Microsoft Entra ID Governance allows you to balance your organization's need for security and employee productivity with the right processes and visibility. These features can be used for your existing business critical third party on-premises and cloud-based applications.

Microsoft Entra ID Governance allows you to model organizational roles using access packages, so you can migrate your existing role definitions to entitlement management.

Microsoft Entra ID Governance allows you to balance your organization's need for security and employee productivity with the right processes and visibility. You can integrate your existing business critical third party on-premises and cloud-based applications with Microsoft Entra ID for identity governance scenarios.

The following documentation provides guidance for Privileged Identity Management (PIM) PowerShell migration.

Learn how to configure security alerts for Azure resource roles in Privileged

Configure security alerts for Microsoft Entra roles Privileged Identity Management.

Learn how to use custom security attribute to configure the scope of a workflow with lifecycle workflows.

Learn how to assign Microsoft Entra roles with access packages.

Learn how to create an access review of PIM for Groups in Microsoft Entra ID.

Learn how to show suggested access packages to users in My Access so they can quickly find the most relevant access packages.

Frequently asked questions about Access Reviews.

Learn how to approve activation requests for group members and owners in Microsoft Entra Privileged Identity Management (PIM).

Learn how to use the My Access portal to approve or deny requests to an access package in Microsoft Entra entitlement management.

Learn how to approve or deny requests for Microsoft Entra roles in Privileged Identity Management (PIM).

Learn how to archive logs and create reports with Azure Monitor in entitlement management.

Learn how to assign eligibility for a group in Privileged Identity Management.

Learn how to assign Microsoft Entra roles in Privileged Identity Management (PIM).

View activity and audit activity history for group assignments in Privileged Identity Management (PIM).

Tutorial for moving users that change jobs using Lifecycle workflows with the Microsoft Entra admin center.

Tutorial for post off-boarding users from an organization using Lifecycle workflows with the Microsoft Entra admin center.

Tutorial for onboarding users to an organization using Lifecycle workflows with the Microsoft Entra admin center.

author: billmath

Learn how to write PowerShell scripts in Azure Automation to interact with Microsoft Entra entitlement management and other features.

services: entra-id-governance

Learn how to bring groups into Privileged Identity Management.

Learn how to change approval and requestor information settings for an access package in entitlement management.

Learn how to change requestor information & lifecycle settings for an access package in entitlement management.

Learn how to change request settings for an access package in entitlement management.

Learn how to change the resource roles for an existing access package in entitlement management.

This article guides a user on checking the status of a Lifecycle workflow

Learn how to check workflow insights within your Microsoft Entra tenant.

Learn the high-level steps you should follow for common scenarios in Microsoft Entra entitlement management.

Learn how to complete an access review of Azure resource and Microsoft Entra roles Privileged Identity Management.

Learn how to complete an access review of group members or application access in Microsoft Entra access reviews.

Learn how to configure automatic assignments based on rules for an access package in entitlement management.

Learn how to configure Azure resource role settings in Privileged Identity Management (PIM).

Learn how to configure Microsoft Entra role settings in Privileged Identity Management (PIM).

Learn how to configure PIM for Groups settings.

Learn how to configure separation of duties enforcement for requests for an access package in entitlement management.

Learn how to configure verified ID settings for an access package in entitlement management.

Learn how to convert guest user access package assignments for an access package in entitlement management.

You can use Microsoft Entra entitlement management to enforce the policies for who can get assigned access to an application.

Learn how to create an access package of resources that you want to share in Microsoft Entra entitlement management.

Learn how to set up an access review in a policy for entitlement management access packages in Microsoft Entra ID part of Microsoft Entra.

Learn how to create an access review of Azure resource and Microsoft Entra roles in Privileged Identity Management (PIM).

Learn how to create an access review of group members or application access in Microsoft Entra ID.

Learn how to create a new container of resources and access packages in entitlement management.

Using Microsoft Entra access reviews, you can download a review history for access reviews in your organization.

This tutorial describes how to create customized reports in Azure Data Explorer by using data from more sources in addition to Microsoft Entra

This tutorial describes how to create customized reports in Azure Data Explorer by using data from Microsoft Entra.

This article guides you in creating a lifecycle workflow.

Learn how to customize the schedule of a lifecycle workflow.

Get a step-by-step guide for customizing emails that you send by using tasks within lifecycle workflows.

Learn how to delegate access governance from IT administrators to access package managers and project managers so that they can manage access themselves.

Learn how to delegate access governance from IT administrators to catalog creators and project managers so that they can manage access themselves.

Learn how to delegate access governance from IT administrators to department managers and project managers so that they can manage access themselves.

Learn how to delete a lifecycle workflow.

Learn how to discover Azure resources to manage in Privileged Identity Management (PIM).

Describes email notifications in Microsoft Entra Privileged Identity Management (PIM).

This article serves as a reference for Microsoft Entra ID behavior when assignment periods of an access package and PIM policy don't align.

author: billmath

Learn how to remove users from an organization in real time on their last day of work by using lifecycle workflows in the Microsoft Entra admin center.

Learn how to extend or renew PIM for groups assignments.

Learn about the settings you can specify to govern access for external users in entitlement management.

This article a tutorial on how to provision users and groups using cloud sync.

This article details service limits for offerings within Microsoft Entra ID Governance

Learn how to activate your group membership or ownership in Privileged

Learn how to hide or delete an access package in Microsoft Entra entitlement management.

This article shows how to create custom alerts with Microsoft Entra ID Governance

This article shows how to use the new identity governance dashboard

This article describes use cases Microsoft Entra ID Governance.

Include file

author: billmath

Information about audit logs with Lifecycle Workflows

This article guides a user on Workflow task definitions and task parameters.

An article discussing Lifecycle workflow versioning and history

Frequently asked questions about Lifecycle workflows.

Learn how to bring identities from SAP SuccessFactors into Microsoft Entra ID and provision access to SAP ERP Central Component (ECC), SAP S/4HANA, and other SAP applications.

Learn how to manage user and guest access as membership of a group or assignment to an application with Microsoft Entra access reviews.

Learn how to allow people outside your organization to request access packages so that you can collaborate on projects.

Manage guest users as members of a group or assigned to an application with Microsoft Entra access reviews.

Learn how to manage users' access as membership of a group or assignment to an application with Microsoft Entra access reviews

A how to article on how to edit a user account related task to run for users synchronized from Active Directory Domain Services (AD DS) with Lifecycle workflows.

This article guides a user to editing a workflow's properties using Lifecycle Workflows.

This article guides a user on managing workflow versions with Lifecycle Workflows.

Learn how you can use entitlement management and Global Secure Access to restrict employee access to cloud apps.

This article guides a user to running a workflow on demand using Lifecycle Workflows.

Learn how to simplify approving access to applications and resources for onboarding external users to your organization.

Information for understanding the APIs in Microsoft Entra Privileged

Learn how to view the audit log history for Microsoft Entra roles in

Learn how to review access of Azure resource and Microsoft Entra roles

Learn how to approve or deny requests for Azure resource roles in Privileged

Learn how to assign Azure resource roles in Privileged Identity Management (PIM).

Describes the roles you can't manage in Microsoft Entra Privileged Identity

Learn how to deploy Privileged Identity Management (PIM) in your Microsoft Entra organization.

Planning for a successful access reviews campaign for a particular application starts with understanding how to model access for that application in Microsoft Entra ID.

Learn how to extend or renew Azure resource role assignments in Privileged Identity Management (PIM).

Learn how to extend or renew Microsoft Entra role assignments in Microsoft Entra Privileged Identity Management (PIM)

Learn how to reprocess assignments for an access package in entitlement management.

Learn how to reprocess a request for an access package in entitlement management.

Learn how to use the My Access portal to request access to an access package in Microsoft Entra entitlement management.

Learn about the request process for an access package and when email notifications are sent in entitlement management.

Learn how to complete an access review of entitlement management access packages in access reviews.

Learn how to review access of group members or application access in Microsoft Entra access reviews.

Learn how to review access of group members with review recommendations in Microsoft Entra access reviews.

Learn how to review your own access to groups or applications in access reviews.

Learn how to review your own access to resources in access reviews.

Learn how to review user access of entitlement management access packages in access reviews.

Learn about partners who can help with deployment and integration of identity management (IAM) and identity governance scenarios.

Learn how to share link to request an access package in entitlement management.

Learn how to enable and get started using Privileged Identity Management (PIM) in the Microsoft Entra admin center.

Trigger Logic Apps based on custom task extensions

Learn how to configure and use custom logic app workflows in entitlement management.

Step-by-step tutorial for how to create your first access package using the Microsoft Entra admin center in entitlement management.

Tutorial for preparing user accounts for Lifecycle workflows.

Learn how to use Azure custom roles in Microsoft Entra Privileged Identity Management (PIM).

Use Access Reviews to extend of remove access from members of partner organizations.

Learn how to use multi-stage reviews to design more efficient reviews with Microsoft Entra.

Learn how to view requests and remove for an access package in entitlement management.

View activity and audit history for Azure resource roles in Privileged Identity Management (PIM).

Learn how to view the user assignments report and audit logs in entitlement management.

Learn how to view, add, and remove assignments for an access package in entitlement management.

Microsoft Entra ID Governance enables you to balance your organization's need for security and end user productivity with the right processes and visibility.

Using access reviews, you can control group membership and application access to meet governance, risk management, and compliance initiatives in your organization.

In entitlement management, approvers for access package requests can either be directly assigned, or determined dynamically. While entitlement management natively supports dynamic approvers such as the requestor's manager, second-level manager, or sponsor from a connected organization, these options don't cover all scenarios. With [custom extensions](entitlement-management-logic-apps-integration.md) calling out to [Azure Logic Apps](/azure/logic-apps/logic-apps-overview), you're able to determine approval requirements for access packages at the time of request through an external system. For example, if the user requesting an access package is in a department where leadership has recently changed, dynamic approvals can query the system and assign the new department head as the approver. With this external call, you're able to determine approval requirements based on each of the [ApprovalStage properties](/graph/api/resources/approvalstage?view=graph-rest-beta#properties). This article walks you through making a custom extension, its underlying Azure Logic App, setting its system-assigned identity and role in the catalog, editing the logic app action to perform business logic, and testing to see if it runs successfully.

>

Describes overview of identity lifecycle management and what is meant by governing the employee lifecycle.

Describes overview of Lifecycle workflow attributes.

Conceptual article discussing workflow extensibility with Lifecycle Workflows

Conceptual article about Lifecycle Workflows reporting and history capabilities

Conceptual article about Lifecycle Workflows reporting and history capabilities.

Conceptual article discussing managing Users synchronized from Active Directory Domain Services (AD DS) to Microsoft Entra with Lifecycle Workflows.

Conceptual article discussing workflow templates and categories with Lifecycle Workflows.

This page provides an overview of the Microsoft Entra ID Governance integrations available to automate provisioning and governance controls.

This article describes shows the licensing requirements for Microsoft Entra ID Governance features.

Describes how to use a resource dashboard to perform an access review

Describes overview of getting started with new business partner and external user scenarios.

How to manage Microsoft Entra Privileged Identity Management (PIM) for Groups.

Describes an overview of Lifecycle workflows and the various parts.

Get an overview of the lifecycle workflow feature of Microsoft Entra ID.

Get an overview of entitlement management and how you can use it to manage access to groups, applications, and SharePoint Online sites for internal and external users.

Provides an overview of Microsoft Entra Privileged Identity Management (PIM).

Planning guide for a successful Lifecycle Workflow deployment.

Planning guide for a successful access reviews deployment.

Learn how to troubleshoot system errors with roles in Microsoft Entra Privileged Identity Management (PIM).

Learn about some items you should check to help you troubleshoot Microsoft Entra entitlement management.

Learn how to use access reviews to manage users that have been excluded from Conditional Access policies

| **Authentication** > **Redirect URIs**| The URIs Microsoft Entra ID accepts as destinations when returning authentication responses (tokens) after successfully authenticating or signing out users. | Same as workforce.|

- If you block access to all apps by default, users are unable to read emails encrypted with Microsoft Rights Management Service, also known as Office 365 Message Encryption (OME). To avoid this issue, we recommend configuring your outbound settings to allow your users to access this app ID: 00000012-0000-0000-c000-000000000000. If you allow only this application, access to all other apps is blocked by default.

Learn how an administrator create a list to allow or block B2B collaboration with specific domains by using the Microsoft Entra admin center.

1. Set up Microsoft Entra Verified ID Service: using [Quick setup](verifiable-credentials-configure-tenant-quick.md) or [Advanced setup instructions](verifiable-credentials-configure-tenant.md).

For more information about optimizing your network, see [Network topology considerations when using Microsoft Entra application proxy](../identity/app-proxy/application-proxy-network-topology.md).

Agents fit naturally into existing workflows. You don't need special training or other licensing to use them. Agents utilize SCUs to operate just like other features in the product. They integrate seamlessly with Microsoft Security solutions and the broader supported partner ecosystem. Agents learn based on feedback and keep you in control on the actions it takes. They handle resource-intensive tasks like threat intelligence briefings, and Conditional Access optimization. With Microsoft Security Copilot agents, you can scale up your teams, people, and processes.