Enforce policy approval settings for admins
From Microsoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Rollout
Rollout dates are often only in the text. When Microsoft moves them, the change shows under "What changed".
What the notice says
Microsoft’s text, safely structuredWe're making some changes to access package approval settings in Entitlement Management. We're introducing a new configuration that will prevent Global Administrators and Identity Governance Administrators from bypassing approval settings configured in access package policies.
When this will happen
Starting August 26, 2024
How this affects your organization
You are receiving this message because our reporting indicates that your organization has one or more users with active access package assignments.
If a Global Administrator or Identity Governance Administrator attempts to directly assign a user to a package and selects a policy with an approval setting that they do not meet, then the request will need to be approved by a designated approver.
What you need to do to prepare
No action is required on your end. This change is being rolled out to all customers and is in accordance with Microsoft Entra ID Governance best practices.
For additional information, click here to learn more.
Microsoft Entra roles mentioned
- Global AdministratorExplicit name or template GUID in this notice
- Identity Governance AdministratorExplicit name or template GUID in this notice
Links open the current public role definition. A mention does not establish tenant impact, assignment, or historical permissions.
What changed
Between archive captures, newest firstThe archive supplies one version of this notice.
Learn more
Links from the notice and their documentation checks- hereNot read yet
Related public changes
No related announcements were found in the saved public history. Check the source for newer announcements.
Not confirmed here
What this page cannot tell you- Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.
- 1 linked page has not been read yet.