A Microsoft Entra documentation page was updated: Microsoft 365 Migration Administrator.
Day in brief
Documentation, not rollout: Conditional Access agent guidance and a one-way Graph-sync caveat lead 11 July
The 11 July 2025 record contains 130 updates and no new, removed, or Message Center entries. The most consequential material is specific documentation guidance: administrators are told to review Conditional Access optimization-agent suggestions, the Connect Microsoft Graph page clarifies UPN synchronization and an irreversible enablement constraint, and updated Entra ID pages cover consent follow-up and hardware OATH-token operations. Nothing supplied establishes a new feature, preview, general-availability milestone, retirement, or service-side behavior change; the remaining examples are largely role-reference or other low-detail maintenance updates.
- Conditional Access optimization-agent guidance makes the administrator decision point explicit
Entra ID · Conditional AccessThe updated Entra ID how-to says suggestions vary with what the agent finds and that the administrator must review them and decide what to do. A related Security Copilot page describes the agent as recommending policies and changes aligned with Zero Trust to help protect users and applications. Because both records are documentation updates, they should not be read as evidence of a new launch, preview, or availability change.
- Connect Microsoft Graph guidance clarifies delayed UPN updates and one-way enablement
Entra ID · GeneralThe page says existing userPrincipalName values remain unchanged when the documented feature is enabled; a later on-premises change to userPrincipalName causes normal delta sync to update the UPN. It also states that the feature cannot be disabled after enablement. This is a behavior clarification with a concrete rollout-planning consequence, not a reported service change.
- Consent guidance addresses the security work after restricting user consent
Entra ID · DeveloperThe updated Manage Consent Requests guidance calls for follow-up steps after disabling or restricting user consent: keep business-critical applications usable, limit impact on support and IT administrators, and help prevent unmanaged accounts in non-Microsoft applications. This is security and operational guidance; the record does not indicate that the consent setting itself changed.
- Hardware OATH-token documentation catalogs Microsoft Graph lifecycle operations
Entra ID · AuthenticationThe updated Entra ID topic covers hardware OATH tokens and identifies Microsoft Graph APIs to upload, activate, and assign them. That is a useful reference clarification for token administrators, but the supplied evidence does not claim a new API, changed availability, or a required tenant configuration change.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
130 updates
Microsoft Entra ID
119 updatesConnect Microsoft Graph
UpdatedAfter enabling this feature, existing userPrincipalName values remain as-is. On next change of the userPrincipalName attribute on-premises, the normal delta sync on users updates the UPN. Once this feature is enabled, it's not possible to disable it.
Template ID: d24aef57-1500-4070-84db-2666f29cf966
Billing Administrator
UpdatedBilling Administrator
Cloud Device Administrator
UpdatedCloud Device Administrator
Compliance Administrator
UpdatedCompliance Administrator
Compliance Data Administrator
Customer LockBox Access Approver
Network Administrator
UpdatedNetwork Administrator
Office Apps Administrator
UpdatedOffice Apps Administrator
Organizational Messages Approver
Organizational Messages Writer
Ai Administrator
UpdatedA Microsoft Entra documentation page was updated: Ai Administrator.
Attack Payload Author
UpdatedA Microsoft Entra documentation page was updated: Attack Payload Author.
A Microsoft Entra documentation page was updated: Attack Simulation Administrator.
A Microsoft Entra documentation page was updated: Attribute Assignment Administrator.
Attribute Assignment Reader
UpdatedA Microsoft Entra documentation page was updated: Attribute Assignment Reader.
A Microsoft Entra documentation page was updated: Attribute Definition Administrator.
Attribute Definition Reader
UpdatedA Microsoft Entra documentation page was updated: Attribute Definition Reader.
Azure Devops Administrator
UpdatedA Microsoft Entra documentation page was updated: Azure Devops Administrator.
A Microsoft Entra documentation page was updated: Desktop Analytics Administrator.
Directory Readers
UpdatedA Microsoft Entra documentation page was updated: Directory Readers.
Directory Writers
UpdatedA Microsoft Entra documentation page was updated: Directory Writers.
Domain Name Administrator
UpdatedA Microsoft Entra documentation page was updated: Domain Name Administrator.
Dynamics 365 Administrator
UpdatedDynamics 365 Administrator
A Microsoft Entra documentation page was updated: Dynamics 365 Business Central Administrator.
Edge Administrator
UpdatedA Microsoft Entra documentation page was updated: Edge Administrator.
Exchange Administrator
UpdatedA Microsoft Entra documentation page was updated: Exchange Administrator.
A Microsoft Entra documentation page was updated: Exchange Recipient Administrator.
A Microsoft Entra documentation page was updated: Extended Directory User Administrator.
Fabric Administrator
UpdatedA Microsoft Entra documentation page was updated: Fabric Administrator.
Global Administrator
UpdatedA Microsoft Entra documentation page was updated: Global Administrator.
Global Reader
UpdatedA Microsoft Entra documentation page was updated: Global Reader.
Groups Administrator
UpdatedA Microsoft Entra documentation page was updated: Groups Administrator.
Guest Inviter
UpdatedA Microsoft Entra documentation page was updated: Guest Inviter.
Helpdesk Administrator
UpdatedA Microsoft Entra documentation page was updated: Helpdesk Administrator.
A Microsoft Entra documentation page was updated: Hybrid Identity Administrator.
Insights Administrator
UpdatedA Microsoft Entra documentation page was updated: Insights Administrator.
Insights Analyst
UpdatedA Microsoft Entra documentation page was updated: Insights Analyst.
Insights Business Leader
UpdatedA Microsoft Entra documentation page was updated: Insights Business Leader.
Intune Administrator
UpdatedA Microsoft Entra documentation page was updated: Intune Administrator.
Iot Device Administrator
UpdatedA Microsoft Entra documentation page was updated: Iot Device Administrator.
Kaizala Administrator
UpdatedA Microsoft Entra documentation page was updated: Kaizala Administrator.
Knowledge Administrator
UpdatedA Microsoft Entra documentation page was updated: Knowledge Administrator.
Knowledge Manager
UpdatedA Microsoft Entra documentation page was updated: Knowledge Manager.
License Administrator
UpdatedA Microsoft Entra documentation page was updated: License Administrator.
A Microsoft Entra documentation page was updated: Message Center Privacy Reader.
Message Center Reader
UpdatedA Microsoft Entra documentation page was updated: Message Center Reader.
A Microsoft Entra documentation page was updated: Microsoft 365 Backup Administrator.
A Microsoft Entra documentation page was updated: Microsoft Entra Joined Device Local Administrator.
A Microsoft Entra documentation page was updated: Microsoft Graph Data Connect Administrator.
A Microsoft Entra documentation page was updated: Microsoft Hardware Warranty Administrator.
A Microsoft Entra documentation page was updated: Microsoft Hardware Warranty Specialist.
A Microsoft Entra documentation page was updated: Organizational Data Source Administrator.
Partner Tier1 Support
UpdatedA Microsoft Entra documentation page was updated: Partner Tier1 Support.
Partner Tier2 Support
UpdatedA Microsoft Entra documentation page was updated: Partner Tier2 Support.
People Administrator
UpdatedA Microsoft Entra documentation page was updated: People Administrator.
A Microsoft Entra documentation page was updated: Permissions Management Administrator.
Permissions Reference
UpdatedA Microsoft Entra documentation page was updated: Permissions Reference.
Printer Administrator
UpdatedA Microsoft Entra documentation page was updated: Printer Administrator.
Printer Technician
UpdatedA Microsoft Entra documentation page was updated: Printer Technician.
A Microsoft Entra documentation page was updated: Privileged Role Administrator.
Search Administrator
UpdatedA Microsoft Entra documentation page was updated: Search Administrator.
Search Editor
UpdatedA Microsoft Entra documentation page was updated: Search Editor.
A Microsoft Entra documentation page was updated: Service Support Administrator.
Sharepoint Administrator
UpdatedA Microsoft Entra documentation page was updated: Sharepoint Administrator.
A Microsoft Entra documentation page was updated: Sharepoint Embedded Administrator.
A Microsoft Entra documentation page was updated: Skype For Business Administrator.
Teams Administrator
UpdatedA Microsoft Entra documentation page was updated: Teams Administrator.
A Microsoft Entra documentation page was updated: Teams Communications Administrator.
A Microsoft Entra documentation page was updated: Teams Communications Support Engineer.
A Microsoft Entra documentation page was updated: Teams Communications Support Specialist.
Teams Devices Administrator
UpdatedA Microsoft Entra documentation page was updated: Teams Devices Administrator.
Teams Reader
UpdatedA Microsoft Entra documentation page was updated: Teams Reader.
A Microsoft Entra documentation page was updated: Teams Telephony Administrator.
Tenant Creator
UpdatedA Microsoft Entra documentation page was updated: Tenant Creator.
User Administrator
UpdatedA Microsoft Entra documentation page was updated: User Administrator.
A Microsoft Entra documentation page was updated: User Experience Success Manager.
Virtual Visits Administrator
UpdatedA Microsoft Entra documentation page was updated: Virtual Visits Administrator.
A Microsoft Entra documentation page was updated: Viva Glint Tenant Administrator.
Viva Goals Administrator
UpdatedA Microsoft Entra documentation page was updated: Viva Goals Administrator.
Viva Pulse Administrator
UpdatedA Microsoft Entra documentation page was updated: Viva Pulse Administrator.
Windows 365 Administrator
UpdatedA Microsoft Entra documentation page was updated: Windows 365 Administrator.
A Microsoft Entra documentation page was updated: Windows Update Deployment Administrator.
Yammer Administrator
UpdatedA Microsoft Entra documentation page was updated: Yammer Administrator.
Connect Version History
Updated> New Microsoft Entra Connect Sync Versions are only available via the Microsoft Entra admin center
Explains requirements to prepare FIDO2 hardware for attestation with Microsoft Entra ID
manager: mwongerapk
Authentication Administrator
UpdatedA Microsoft Entra documentation page was updated: Authentication Administrator.
A Microsoft Entra documentation page was updated: Authentication Extensibility Administrator.
A Microsoft Entra documentation page was updated: Authentication Policy Administrator.
A Microsoft Entra documentation page was updated: Privileged Authentication Administrator.
This topic covers how to manage hardware oath tokens in Microsoft Entra ID, including Microsoft Graph APIs that you can use to upload, activate, and assign hardware OATH tokens.
Password Administrator
UpdatedA Microsoft Entra documentation page was updated: Password Administrator.
- To view the Microsoft Entra audit logs, you need at least the [Reports reader](../../identity/role-based-access-control/permissions-reference.md#reports-reader) role.
category: Monitoring
Updatedauthor: barclayn
Attribute Log Administrator
UpdatedA Microsoft Entra documentation page was updated: Attribute Log Administrator.
Attribute Log Reader
UpdatedA Microsoft Entra documentation page was updated: Attribute Log Reader.
Power Platform Administrator
UpdatedUsers in this role can create and manage all aspects of environments, Power Apps, Flows, Data Loss Prevention policies. Additionally, users with this role have the ability to manage support tickets and monitor service health.
Reports Reader
UpdatedA Microsoft Entra documentation page was updated: Reports Reader.
Usage Summary Reports Reader
UpdatedA Microsoft Entra documentation page was updated: Usage Summary Reports Reader.
Cloud App Security Administrator
Security Administrator
UpdatedA Microsoft Entra documentation page was updated: Security Administrator.
Security Operator
UpdatedA Microsoft Entra documentation page was updated: Security Operator.
Security Reader
UpdatedA Microsoft Entra documentation page was updated: Security Reader.
A Microsoft Entra documentation page was updated: Azure Information Protection Administrator.
Cloud Application Administrator
Manage Consent Requests
UpdatedAfter disabling or restricting user consent, you have several important steps to take to help keep your organization secure as you continue to allow business-critical applications to be used. These steps are crucial to minimize impact on your organization's support team and IT administrators, and to help prevent the use of unmanaged accounts in non-Microsoft applications.
Application Administrator
UpdatedA Microsoft Entra documentation page was updated: Application Administrator.
A Microsoft Entra documentation page was updated: Attribute Provisioning Administrator.
A Microsoft Entra documentation page was updated: Attribute Provisioning Reader.
A Microsoft Entra documentation page was updated: Directory Synchronization Accounts.
The Microsoft Entra Conditional Access optimization agent provides suggestions for your Conditional Access policies. The suggestions vary based on what the agent finds. As the administrator, you need to review the suggestions and decide what to do.
Conditional Access Administrator
Learn how to use advanced certificate signing options in the SAML token for preintegrated apps in Microsoft Entra ID
Microsoft Entra ID has a gallery that contains thousands of preintegrated applications that use SSO. This article uses an enterprise application named **Microsoft Entra SAML Toolkit 1** as an example, but the concepts apply for most preconfigured enterprise applications in the Microsoft Entra application gallery.
Organizational Branding Administrator
A Microsoft Entra documentation page was updated: Identity Governance Administrator.
Application Developer
UpdatedA Microsoft Entra documentation page was updated: Application Developer.
Microsoft Entra ID Governance
2 updatesA Microsoft Entra documentation page was updated: Lifecycle Workflows Administrator.
The visibility change will only impact how end-users can discover access packages via the "Available" tab, the "View all" option, or when using the search bar within these sections to find requestable access packages. The change won't impact the visibility logic for other tabs like "Suggested," "Active," or "Expired" (even when using search within those tabs), nor does it impact other My Access portal sections such as "Request history" or "Approvals."
Microsoft Entra External ID
6 updatesB2c Ief Keyset Administrator
UpdatedA Microsoft Entra documentation page was updated: B2c Ief Keyset Administrator.
B2c Ief Policy Administrator
UpdatedA Microsoft Entra documentation page was updated: B2c Ief Policy Administrator.
A Microsoft Entra documentation page was updated: External Id User Flow Administrator.
A Microsoft Entra documentation page was updated: External Id User Flow Attribute Administrator.
A Microsoft Entra documentation page was updated: External Identity Provider Administrator.
Create an enterprise application using the client ID for a multitenant application.
Microsoft Entra Global Secure Access
2 updatesA Microsoft Entra documentation page was updated: Global Secure Access Administrator.
A Microsoft Entra documentation page was updated: Global Secure Access Log Reader.
Security Copilot + Entra
1 updateThe Conditional Access optimization agent helps you ensure all users and applications are protected by Conditional Access policies. It recommends policies and changes based on best practices aligned with [Zero Trust](/security/zero-trust/deploy/identity) and Microsoft's learnings.