Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord
Microsoft Graph · Official Microsoft guidance

Observed content change

May need admin actionCheck the roles and permissions you grant.

Changed wording view
NewBackup and recovery | Microsoft 365 backup and storage
[added: Added request guidance and examples for using retentionSettings when you create or update Exchange, OneDrive for Business, and SharePoint protection policies to configure how long backups are retained.]
Before: No saved wording on this side.
After: Added request guidance and examples for using retentionSettings when you create or update Exchange, OneDrive for Business, and SharePoint protection policies to configure how long backups are retained.
NewMail
[added: Updated national cloud availability in China operated by 21Vianet for the mailFolder: delta and message: delta methods. Use these methods to track incremental changes to mail folders and messages within a mail folder.]
Before: No saved wording on this side.
After: Updated national cloud availability in China operated by 21Vianet for the mailFolder: delta and message: delta methods. Use these methods to track incremental changes to mail folders and messages within a mail folder.
NewSecurity | Data security and compliance
[added: Added the copyToClipboard, pasteFromClipboard, print, and accessDebugTools members to the userActivityType and userActivityTypes enumerations in v1.0. These enumerations are used by activityMetadata and policyScopeBase to represent activities evaluated against data protection policies. Use the Prefer: include-unknown-enum-members request header to retrieve these values.]
Before: No saved wording on this side.
After: Added the copyToClipboard, pasteFromClipboard, print, and accessDebugTools members to the userActivityType and userActivityTypes enumerations in v1.0. These enumerations are used by activityMetadata and policyScopeBase to represent activities evaluated against data protection policies. Use the Prefer: include-unknown-enum-members request header to retrieve these values.
NewIdentity and access | Network access
[added: Added the webFilteringPolicy resource type and related methods for configuring how Global Secure Access allows or blocks web traffic based on source sessions, URLs, web categories, and HTTP request methods.]
Before: No saved wording on this side.
After: Added the webFilteringPolicy resource type and related methods for configuring how Global Secure Access allows or blocks web traffic based on source sessions, URLs, web categories, and HTTP request methods.
NewSecurity
[added: Added the lookback property to the ruleSchedule resource to control the time window evaluated by each scheduled custom detection rule run.]
Before: No saved wording on this side.
After: Added the lookback property to the ruleSchedule resource to control the time window evaluated by each scheduled custom detection rule run.
NewSecurity
[added: Added the eventGroupingKind property to the alertTemplate resource and the eventGroupingKind enumeration type. Use singleAlert to group matching events from one scheduled execution into a single alert, or alertPerEvent to create a separate alert for each matching event.]
Before: No saved wording on this side.
After: Added the eventGroupingKind property to the alertTemplate resource and the eventGroupingKind enumeration type. Use singleAlert to group matching events from one scheduled execution into a single alert, or alertPerEvent to create a separate alert for each matching event.
NewDevice and app management | Cloud PC
[added: Added the cloudPcReserveHealthScenario member to the alertRuleTemplate enumeration type used by alertRule to monitor Windows 365 Reserve Cloud PC health conditions.]
Before: No saved wording on this side.
After: Added the cloudPcReserveHealthScenario member to the alertRuleTemplate enumeration type used by alertRule to monitor Windows 365 Reserve Cloud PC health conditions.
NewDevice and app management | Cloud PC
[added: Added the cloudPcReserveLicensesAvailabilityBelowThreshold, reserveCloudPcUnlicensedUsersAssignment, and cloudPcMaxUserStorageUsageThresholdExceeded members to the conditionCategory enumeration type used by ruleCondition to monitor available Reserve licenses, unlicensed user assignments, and maximum user storage usage.]
Before: No saved wording on this side.
After: Added the cloudPcReserveLicensesAvailabilityBelowThreshold, reserveCloudPcUnlicensedUsersAssignment, and cloudPcMaxUserStorageUsageThresholdExceeded members to the conditionCategory enumeration type used by ruleCondition to monitor available Reserve licenses, unlicensed user assignments, and maximum user storage usage.
NewIdentity and access | Directory management
[added: Added the deletedDateTime property to the unifiedRoleDefinition resource. Use it to read when a custom role definition was soft-deleted.]
Before: No saved wording on this side.
After: Added the deletedDateTime property to the unifiedRoleDefinition resource. Use it to read when a custom role definition was soft-deleted.
NewIdentity and access | Governance
[added: Added the timeBasedAttributeTriggerV2 resource type for configurable time-based lifecycle workflow triggers. Select a date-type user attribute and configure an operator to run workflows on an exact date, within a rolling window, or between two offsets before or after that date.]
Before: No saved wording on this side.
After: Added the timeBasedAttributeTriggerV2 resource type for configurable time-based lifecycle workflow triggers. Select a date-type user attribute and configure an operator to run workflows on an exact date, within a rolling window, or between two offsets before or after that date.
NewDevice and app management | Cloud PC
[added: Added the setDeviceName action to set a Cloud PC's operating system device name without changing its display name.]
Before: No saved wording on this side.
After: Added the setDeviceName action to set a Cloud PC's operating system device name without changing its display name.
NewDevice and app management | Cloud PC
[added: Added the cloudPcBulkSetDeviceName resource type to set device names for multiple Cloud PCs by using a naming template.]
Before: No saved wording on this side.
After: Added the cloudPcBulkSetDeviceName resource type to set device names for multiple Cloud PCs by using a naming template.
NewIdentity and access | Identity and sign-in
[added: Added the identityVerificationStatus resource type and related methods to read a user's verification status, record verification events, apply administrative override reasons, and remove event records.]
Before: No saved wording on this side.
After: Added the identityVerificationStatus resource type and related methods to read a user's verification status, record verification events, apply administrative override reasons, and remove event records.
NewIdentity and access | Identity and sign-in
[added: Added the provenance property to the authenticationMethod resource to inspect the trust classification, supporting assertions, and chain status of FIDO2 authentication methods. Added the attestProvenance action to apply an administrative attestation to credential provenance.]
Before: No saved wording on this side.
After: Added the provenance property to the authenticationMethod resource to inspect the trust classification, supporting assertions, and chain status of FIDO2 authentication methods. Added the attestProvenance action to apply an administrative attestation to credential provenance.
NewIdentity and access | Identity and sign-in
[added: Added the settings relationship to the conditionalAccessRoot resource and related methods to read, update, and reset tenant-wide user-action exclusions for Conditional Access policies that target all resources.]
Before: No saved wording on this side.
After: Added the settings relationship to the conditionalAccessRoot resource and related methods to read, update, and reset tenant-wide user-action exclusions for Conditional Access policies that target all resources.
NewReports | Identity and access reports
[added: Added methods to the serviceActivity resource to retrieve counts of successful and failed Agent ID autonomous and interactive sign-ins during a specified time period.]
Before: No saved wording on this side.
After: Added methods to the serviceActivity resource to retrieve counts of successful and failed Agent ID autonomous and interactive sign-ins during a specified time period.

Source: Microsoft source · © Microsoft · CC BY 4.0.

Read the current Microsoft source · Link to this observation · Compare any two versions

Observation details
Observed by ChangeIntel
today 01:22 UTC
Source update metadata
today 00:36 UTC
Microsoft's latest commit in that period
Add beta documentation for web filtering policies (#29634) · committed 12 Nov 17:29 UTC · View diff
First observed on this installation
8 Oct 23:14 UTC
Last successful check
today 07:27 UTC
Next check due
today 13:27 UTC

Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment. Article references show literal targets and labels, including relative addresses; image bytes are not captured or compared.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 11:05 UTC · 270 of 275 readable · 268 fully read · documentation 469/469 current