Saturday, 31 January 2026

31 January: Kerberos support clarification leads an otherwise quiet documentation day

All six recorded changes were updates to Microsoft Learn documentation, with no new or retired items and no Message Center announcements. The most consequential update states that cloud-only Microsoft Entra ID accounts are supported for Kerberos authentication with workloads such as Azure Files, Azure Virtual Desktop, and Windows authentication access to Azure SQL Managed Instance. The other notable entries clarify delegated-role boundaries and an External ID capability table; the supplied evidence does not establish any new launch, preview, general availability milestone, or changed tenant behavior.

• Entra ID · Authentication

  Entra ID Kerberos guidance explicitly covers cloud-only accounts

  The updated Kerberos page states that accounts managed solely in Microsoft Entra ID are supported for Kerberos authentication by workloads including Azure Files, Azure Virtual Desktop, and Windows authentication access to Azure SQL Managed Instance. Because this is recorded as a documentation update, it should be treated as a support clarification rather than evidence of a new feature launch or tenant-wide behavior change.

• Entra ID · Authentication

  User Administrator delegation boundaries are clarified

  The roles documentation lists User Administrator as able to manage users and groups, including resetting passwords for limited administrators, but only within the assigned administrative unit. It also states that User Administrator cannot currently manage users’ profile photographs. The evidence supports updating delegated-administration expectations, not concluding that the underlying permissions changed on this date.

• External ID · Standards

  External ID support reference records OpenID Connect support

  The customer-features table was updated with an OpenID Connect row marked “Yes” in both displayed support columns. The excerpt does not define those columns or provide rollout details, so this is best treated as a reference-table clarification rather than a new protocol availability announcement.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.