Wednesday, 28 January 2026

Day in brief

Conditional Access exclusions and dynamic-group rule limits clarified; no feature release indicated

28 January was a documentation-maintenance day: all five recorded changes were Microsoft Learn updates, with no new, removed, or Message Center items. The most substantive edits clarify Conditional Access resource exclusions and the limits of the dynamic-group `memberOf` attribute. Other updates refine access-package assignment instructions and sign-in branding CSS guidance. The supplied evidence does not establish a new preview, general-availability release, retirement, or service-behavior change.

Entra ID · Conditional Access
Conditional Access documentation highlights resource exclusions
The Conditional Access Cloud Apps update covers resource exclusions for a custom enterprise application and Exchange Online. This is documented as an update rather than a feature launch; the record does not indicate that existing tenant policies or exclusion capability changed. Administrators working with these resources should verify that their policy design matches the clarified guidance.
Entra ID · General
Dynamic-group rules clarify the limits of `memberOf`
The Groups Dynamic Rule Member Of page states that `memberOf` cannot be used with other operators, including a rule intended to prevent members of one group from being in another dynamic group. This clarifies supported rule authoring constraints; it does not announce a new dynamic-group behavior or migration requirement.
ID Governance · Governance
Access-package assignment steps are refined
The Entitlement Management Access Package Assignments update specifies that, after selecting a policy, administrators can add users and choose the users to assign the access package to under that policy. This is a procedural documentation clarification for assignment workflows, not evidence of a new access-package capability.
Entra ID · Authentication
Company branding guidance identifies CSS selectors for sign-in details
The Company Branding CSS Template update provides CSS selectors to configure details of the sign-in experience. It gives branding implementers more precise documentation for styling, but the evidence does not indicate a new branding feature or availability change.