- The `Group.Read.All` permission is the least privileged permission required to *view groups*.
Day in brief
Sensitivity-label task guidance leads a quiet day; Entra ID and External ID add permission and WAF checks
11 November was primarily a documentation-led period. A new ID Governance article explains how to see sensitivity labels during Lifecycle Workflows task creation; an Entra ID update identifies Group.Read.All as the least-privileged permission for viewing groups in health-alert notification guidance; and an External ID update calls for testing after a Cloudflare WAF connection. The evidence does not establish a preview, general-availability release, retirement, or service-behavior change.
- ID Governance — new Lifecycle Workflows sensitivity-label guidance
ID Governance · GovernanceThe new Microsoft Learn article explains how to see sensitivity labels during Lifecycle Workflows task creation. This is documentation describing a capability, not evidence of a new rollout, preview, or general-availability change.
- Entra ID — health-alert guidance identifies Group.Read.All as least privilege
Entra ID · MonitoringThe updated health-alert notification guidance states that Group.Read.All is the least-privileged permission required to view groups. This is a concrete permission and security clarification; it does not state that tenants must change existing assignments.
- External ID — Cloudflare WAF guidance adds post-connection testing
External ID · GeneralThe updated integration guidance says to test the configuration after connecting Cloudflare WAF with Microsoft Entra External ID to confirm that it works. This is an operational documentation clarification, not evidence of a new integration launch or availability change.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
5 updates
Microsoft Entra ID
1 updateMicrosoft Entra ID Governance
3 updatesThis article describes sensitivity labels in Workflows, and how to see them during the task creation process.
This article guides a user on reprocessing workflow runs using Lifecycle Workflows
Maintaining and classifying secure data within your environment is an important part in maintaining a secure environment. Sensitivity labels from Microsoft Purview Information Protection let you classify and protect your organization's data, while making sure that user productivity and their ability to collaborate isn't hindered. With sensitivity labels in Lifecycle Workflows, administrators are able to quickly view the sensitivity labels of groups during creation, and editing, of workflow tasks.
Microsoft Entra External ID
1 updateConfigure Waf Integration
UpdatedOnce you’ve connected Cloudflare WAF with Microsoft Entra External ID, it’s important to test the configuration to ensure everything is working as expected.