Daily.Entra.NewsAll six reported changes on 15 January were Microsoft Learn documentation updates; no new or removed items were reported. The substantive edits clarify Agent ID permission inheritance and access-package governance, app-registration owner monitoring, Primary Refresh Token renewal and reauthentication, and the Global Secure Access client path for Internet Access traffic. The two implicit-grant entries show diagram or image updates, so the supplied evidence does not support calling this a feature launch, preview, general-availability change, retirement, or platform behavior change.
Agent ID · StandardsThe updated overview says agent identities start with limited permissions, including OAuth 2 delegated scopes inherited from a parent agent identity blueprint. Resource access can also be assigned directly through access packages, which an agent identity can request for itself or its owner or sponsor can request on its behalf. This is governance documentation, not evidence of a newly launched capability.
Entra ID · Microsoft identity platformThe updated Identity Platform Integration Checklist treats the app-registration owner list as a security control: organizations should minimize the number of owners and manually monitor the list. Administrators can use this guidance when reviewing ownership of existing registrations; the update does not describe a new ownership feature.
Entra ID · AuthenticationThe updated Primary Refresh Token page states that a PRT is valid for 90 days and is continuously renewed while the user actively uses the device. It also points to Conditional Access sign-in frequency session control when an organization requires users to reauthenticate. The evidence supports a documentation clarification, not a change to PRT lifetime or renewal behavior.
Internet Access · FundamentalsThe updated Traffic Forwarding page says Internet access traffic can be forwarded to the service by connecting through the Global Secure Access desktop client. This clarifies the documented connection method for Internet Access deployments; it does not establish a new availability or rollout milestone.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
Once issued, a PRT is valid for 90 days and is continuously renewed as long as the user actively uses the device. Organizations can require users re-authenticate in order to access resources using the Sign-in [frequency session control](../conditional-access/concept-conditional-access-session.md).
:::image type="content" source="./media/application-registration-best-practices/implict-grant-flow.png" alt-text="Screenshot that shows where the implicit flow property is located.":::
 If your app is registered in a directory, minimize and manually monitor the list of app registration owners.
When created, agent identities have limited permissions, such as OAuth 2 delegated permission scopes [inherited from their parent agent identity blueprint](../agent-id/identity-professional/configure-inheritable-permissions-blueprints.md). In addition, agent identities can have resource access assigned to them directly via access packages. Agent identities can request an access package for themselves, or have their owner or sponsor request one on their behalf. With access packages, you're able to assign agent identities access to the following resources:
Internet access traffic can be forwarded to the service by connecting through the [Global Secure Access desktop client](how-to-install-windows-client.md).
