How to transition off of Microsoft Entra Permissions Management for the anticipated product deprecation.
Day in brief
Permissions Management offboarding guidance signals an anticipated deprecation; Security Copilot expands Conditional Access optimization-agent guidance
5 July was primarily a documentation-led period: 75 changes included two new pages and 73 updates, with no removals. The consequential changes were new Security Copilot guidance for reviewing optimization-agent suggestions and monitoring its metrics and audit events, updated guidance stating a Microsoft Entra ID P1 licensing prerequisite, and an explicit Microsoft Entra Permissions Management offboarding signal. A separate Entra ID update clarifies the Azure role-assignment requirement for sign-in to Azure virtual machines and Arc-connected Windows Server. The supplied evidence does not establish a preview, general availability release, or deprecation deadline.
- Updated offboarding guidance flags an anticipated Microsoft Entra Permissions Management deprecation
Entra ID · GeneralThe updated guidance explains how to transition off Microsoft Entra Permissions Management for an anticipated product deprecation. This is the clearest retirement signal in the period, but no retirement date is supplied.
- New Security Copilot guidance covers Conditional Access optimization-agent suggestions
Security Copilot · Conditional AccessA new page explains how to review and apply suggestions from the Security Copilot for Microsoft Entra optimization agent. It documents an administrator workflow; the page is not evidence of a preview or GA launch.
- New documentation describes optimization-agent metrics and audit eventsSecurity Copilot · Conditional Access
A second new Security Copilot page documents the optimization agent's metrics and events in audit logs, giving administrators guidance for observing agent activity. The supplied evidence does not state that the audit schema or availability changed.
- Updated optimization-agent guidance states a Microsoft Entra ID P1 minimum
Entra ID · FundamentalsThe updated Agent Optimization Review Suggestions guidance states that at least a Microsoft Entra ID P1 license is required. This is presented as a documented prerequisite; the evidence does not establish whether the underlying licensing rule changed on this date.
- Entra sign-in guidance clarifies Azure role assignments for VM and Arc server access
Entra ID · AuthenticationUpdated guidance states that a Microsoft Entra user must have an Azure role assignment before signing in to an Azure virtual machine or Arc-connected Windows Server, and that the same roles apply to both. This is a documentation clarification rather than evidence of a newly introduced platform behavior.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
75 updates
Microsoft Entra ID
72 updatesView the latest public preview and general availability of features in Permissions Management.
How to add an account/subscription/project to Permissions Management after onboarding is complete.
How to add or remove a user in Microsoft Entra Permissions Management through the Microsoft Enter admin center.
How to configure AWS IAM Identity Center as an identity provider.
How to configure Okta as an identity provider in Microsoft Entra Permissions Management.
How to create a rule in the Autopilot dashboard in Microsoft Entra Permissions Management.
How to create and view activity alerts and alert triggers in Microsoft Entra Permissions Management.
How to create and view permission analytics triggers in the Permission analytics tab in Permissions Management.
How to create and view rule-based anomaly alerts and alert triggers in Permissions Management.
How to create and view statistical anomaly alerts and alert triggers in the Statistical Anomaly tab in Permissions Management.
How to create folders to organize Authorization Systems - accounts, subscriptions, and projects - in Microsoft Entra Permissions Management.
How to define and manage users, roles, and access levels in the Permissions Management User management dashboard.
How to enable Microsoft Entra Permissions Management in your organization.
How to enable or disable the controller in Permissions Management after onboarding is complete.
Frequently asked questions (FAQs) about Microsoft Entra Permissions Management.
How to generate, view, and apply rule recommendations in the Microsoft Entra Permissions Management Autopilot dashboard.
How to manage users and groups in the User management dashboard in Permissions Management.
Microsoft Entra Permissions Management glossary
View current Microsoft Entra Permissions Management partners and their websites.
Quickstart guide - How to quickly onboard your Microsoft Entra Permissions Management product
Review roles and the level of permissions assigned in Microsoft Entra Permissions Management.
How to onboard a Google Cloud Platform (GCP) project on Permissions Management.
How to a Microsoft Azure subscription on Permissions Management.
How to onboard an Amazon Web Services (AWS) account to Permissions Management.
How to select group-based permissions settings with the User management dashboard.
How to view analytic information about access keys in Permissions Management.
How to view usage analytics about active resources in Permissions Management.
How to view analytic information about active tasks in Permissions Management.
How to view analytic information about groups in Permissions Management.
How to view analytic information about serverless functions in Permissions Management.
How to view analytic information about users in Permissions Management.
How to use the Analytics dashboard in Permissions Management to view details about users, groups, active resources, active tasks, access keys, and serverless functions.
How to view and configure settings for collecting data from your authorization system.
How to view current billable resources in your authorization system in Microsoft Entra Permissions Management.
How to view data about the activity in your authorization system in the Microsoft Entra Permissions Management Dashboard.
How to view information about active and completed tasks in the Activities pane in Permissions Management.
How to view information about alerts and alert triggers in the Alerts dashboard in Permissions Management.
How to view information about rules in the Autopilot dashboard in Permissions Management.
How to view statistics and data about your authorization system in the Permissions Management.
How to view personal and organization information in the Account settings dashboard in Microsoft Entra Permissions Management.
How to view current privileged role assignments in the Microsoft Entra Insights tab.
How to view information about identities that can access accounts from an external account in Permissions Management.
How to revoke access to high-risk and unused tasks or assign read-only status for Microsoft Azure and Google Cloud Platform (GCP) identities in the Remediation dashboard.
How to attach and detach permissions for groups, users, and service accounts for Microsoft Azure and Google Cloud Platform (GCP) identities in the Remediation dashboard in Permissions Management.
How to attach and detach permissions for users, roles, and groups for Amazon Web Services (AWS) identities in the Remediation dashboard in Permissions Management.
How to clone a role/policy in Microsoft Entra Permissions Management.
How to create a role/policy in the Remediation dashboard.
How to create or approve a request for permissions in the Remediation dashboard.
How to delete a role/policy in the Microsoft Entra Permissions Management Remediation dashboard.
Understand potential error codes that may appear during onboarding of Microsoft Entra Permissions Management
How to modify a role/policy in the Remediation dashboard in Microsoft Entra Permissions Management.
Troubleshoot issues with Permissions Management
How to view existing roles/policies and requests for permission in the Remediation dashboard in Permissions Management.
How to view and filter information about roles/policies in the Microsoft Entra Permissions Management Remediation dashboard.
How to create a custom query in the Audit dashboard in Microsoft Entra Permissions Management.
How to create, view, and share a custom report in the Permissions Management.
How to filter and query user activity in Microsoft Entra Permissions Management.
How to generate an on-demand report from a query in the **Audit** dashboard in Permissions Management.
How to generate and view a system report in the Permissions Management.
Use queries to see how users access information in an authorization system in Permissions Management
UpdatedHow to use queries to see how users access information in an authorization system in Permissions Management.
View a list and description of all system reports available in Permissions Management reports
UpdatedView a list and description of all system reports available in Permissions Management.
How to view and download the Permissions Analytics Report in Permissions Management.
How to view system reports in the Reports dashboard in Permissions Management.
How to configure ServiceNow with Microsoft Entra Permissions Management.
How to view the Permissions Management API integration settings and create service accounts and roles.
- You must have at least the [Microsoft Entra ID P1](overview.md#license-requirements) license.
An introduction to Microsoft Entra Permissions Management.
The following diagram shows a high-level architecture of provisioning engine connecting to a single forest, although multiple forests are supported. This architecture shows how the various components interact with each other.
A User account in Microsoft Entra must be added to a role assignment in Azure before the user is allowed to sign in to Azure virtual machines or Arc-connected Windows Server. The same roles are used for both Azure virtual machines and Arc-enabled Windows Server.
Agent Optimization
UpdatedThe Conditional Access optimization agent helps you ensure all users are protected by policy. It recommends policies and changes based on best practices aligned with [Zero Trust](/security/zero-trust/deploy/identity) and Microsoft's learnings.
Learn how Microsoft Entra Permissions Management helps strengthen security in cloud environments as an enhancement for Defender for Cloud
Microsoft Entra ID Governance
1 update
[Learn more](../../id-governance/entitlement-management-organization.md)
Security Copilot + Entra
2 updatesLearn how to review and apply suggestions provided by the Security Copilot for Microsoft Entra optimization agent.
Learn about the Security Copilot for Microsoft Entra optimization agent metrics and events in audit logs.