1. Go to **Backup and recovery** > **Backups**. Select a backup from the list, and then select **Create difference report**.
Day in brief
Tenant Governance preview gets end-to-end documentation; risk and recovery guidance sharpen
The 21 March period was documentation-led. Microsoft added new preview Learn content for Microsoft Entra Tenant Governance covering its purpose, deployment, tenant discovery, governance, and configuration monitoring. The most actionable revised guidance clarifies risk remediation across authentication methods, makes incomplete recovery and application-secret checks explicit, and details WAF configuration for External ID. The supplied evidence supports documentation additions and clarifications, not a general-availability announcement, retirement, or confirmed service launch.
- Microsoft Entra Tenant Governance gains end-to-end preview documentation
ID Governance · GovernanceA new ID Governance page covers deployment from setup through tenant discovery, governance, and configuration monitoring. Companion new pages define the capability and describe the signals and metrics used to identify and evaluate related tenants. This is a documentation addition for a preview capability, not evidence of general availability.
- Identity Protection documentation clarifies risk-remediation coverage
ID Protection · Conditional AccessUpdated Conditional Access Grant guidance says that when user risk is detected, users can self-remediate through the appropriate flow regardless of authentication method. It specifically states that the Microsoft-managed remediation policy accommodates password-based and passwordless methods and links to the risk-remediation control marked preview. The evidence describes documented behavior; it does not establish a new policy rollout.
- Recovery History guidance documents partial-recovery status
Entra ID · GeneralThe updated Entra ID guidance states that a partially successful recovery appears as “Completed with warnings.” Selecting that status displays the changes that were not recovered, giving recovery operators a documented way to identify incomplete outcomes.
- Application recovery guidance adds a secret-impact check
Entra ID · MonitoringUpdated guidance tells administrators to validate whether application secrets were affected after determining the cause of changes. It directs them to the audit log and to events showing that an application secret was changed or updated. This is security-oriented recovery guidance, not a claim of automatic secret remediation.
- External ID WAF guidance details the Azure Front Door Premium setup
External ID · SecurityThe updated tutorial says to enable WAF protection by configuring a WAF policy and associating it with Azure Front Door Premium. It describes rule sets for common vulnerabilities, malicious bot activity, and layer 7 DDoS protection. This is configuration guidance rather than a launch notice.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
17 updates
Microsoft Entra ID
8 updatesRecover Applications
UpdatedAfter you determine the cause of the changes, validate whether the secrets for applications were impacted. Find changes to application secrets in the audit log. Look for events that indicate the application secret was changed or updated.
Recover Objects
Updated1. Go to **Backup and recovery** > **Difference reports**. Select a completed difference report.
View Available Backups
Updated1. Browse to **Backup and recovery**. The **Overview** page shows feature highlights, alerts, and recent activity.
Whats New
Updated**Service category:** MFA
Review Recovery History
UpdatedIf a recovery operation partially succeeds, the **Status** column shows **Completed with warnings**, allowing you to identify objects that weren't recovered. Select **Completed with warnings** to view the details of the changes that were not recovered.
Security Store In Entra
UpdatedSecurity Store is embedded in the Microsoft Entra admin center, so you can discover and deploy agents and solutions without leaving your identity management workflow.
Troubleshooting
Updated**If the difference report is running for a long time:**
Microsoft Entra ID Protection
2 updatesConditional Access Grant
UpdatedWhen user risk is detected, users can self-remediate by completing the appropriate remediation flow, regardless of their authentication method. The Microsoft-managed remediation policy in Conditional Access accommodates all authentication methods, including password-based and passwordless. For more information, see [Require risk remediation with Microsoft-managed remediation (preview)](../../id-protection/concept-identity-protection-policies.md#require-risk-remediation-control-preview).
Identity Protection Policies
UpdatedIdentifying risk-based Conditional Access policies
Microsoft Entra ID Governance
3 updatesLearn how to deploy Microsoft Entra Tenant Governance from setup through tenant discovery, governance, and configuration monitoring
Learn about the signals and metrics used in Microsoft Entra Tenant Governance to identify and evaluate related tenants
Learn about Microsoft Entra Tenant Governance and how it helps organizations discover, manage, and govern tenants across their environment
Microsoft Entra External ID
2 updates
<br/>**Source tenant**
To enable WAF for protection, configure a WAF policy and associate it with Azure Front Door Premium. Microsoft optimizes Azure Front Door premium for security and manages the rule sets provided by the WAF to protect against common vulnerabilities including cross-site scripting and JavaScript exploits. Additionally, Azure WAF provides rule sets that help protect against malicious bot activity and provide layer 7 DDoS protection for your application.
Microsoft Entra Workload ID
1 update
An app role assignment records when a user, group, or service principal is assigned an app role for an app. All properties of app role assignment are in scope. View all app role assignment details and properties in the [Microsoft Graph appRoleAssignment resource type](/graph/api/resources/approleassignment).
