MODIFIED docs/id-governance/lifecycle-workflow-tasks.md

Modified by Ortagus Winfrey on Aug 29, 2025 8:50 PM
📖 View on learn.microsoft.com

+16 / -3 lines changed

Commit: Assignment package workflow Public Preview

Changes:

Before

After

 
Allows you to remove all access package assignments for users. For more information on access packages, see [What are access packages and what resources can I manage with them?](entitlement-management-overview.md#what-are-access-packages-and-what-resources-can-i-manage-with-them).
 
You're able to customize the task name and description for this task in the Microsoft Entra admin center.
:::image type="content" source="media/lifecycle-workflow-task/remove-all-access-package-assignment-user-task.png" alt-text="Screenshot of the remove all user access package assignment task.":::
 
For Microsoft Graph, the parameters for the **Remove all access package assignments for user** task are as follows:
    "displayName": "Remove all access package assignments for user",
    "isEnabled": true,
    "taskDefinitionId": "42ae2956-193d-4f39-be06-691b8ac4fa1d",
    "arguments": []
}
```

 
Allows you to remove all access package assignments for users. For more information on access packages, see [What are access packages and what resources can I manage with them?](entitlement-management-overview.md#what-are-access-packages-and-what-resources-can-i-manage-with-them).
 
You're able to customize the task name, description, and whether or not access package assignments are removed immediately, or after a certain amount of days  for this task in the Microsoft Entra admin center.
:::image type="content" source="media/lifecycle-workflow-task/remove-all-access-package-assignment-user-task.png" alt-text="Screenshot of the remove all user access package assignment task.":::
 
For Microsoft Graph, the parameters for the **Remove all access package assignments for user** task are as follows:
    "displayName": "Remove all access package assignments for user",
    "isEnabled": true,
    "taskDefinitionId": "42ae2956-193d-4f39-be06-691b8ac4fa1d",
    "arguments": [
        {
             "description": "Remove all access packages assigned to the user",
            "displayName": "Remove all access package assignments for user",
            "id": "42ae2956-193d-4f39-be06-691b8ac4fa1d",
            "version": 1,
            "parameters": [
                {
                    "name": "daysUntilExpiration",
                    "values": [],

MODIFIED docs/id-governance/privileged-identity-management/pim-how-to-add-role-to-user.md

Modified by rolyon on Aug 29, 2025 9:37 PM
📖 View on learn.microsoft.com

+2 / -2 lines changed

Commit: Assign custom role with administrative unit scope

Changes:

Before

After

ms.service: entra-id-governance
ms.topic: how-to
ms.subservice: privileged-identity-management
ms.date: 08/11/2025
ms.author: barclayn
ms.reviewer: shaunliu
ms.custom: subject-rbac-steps, sfi-ga-nochange, sfi-image-nochange
   - Select the role scope (in this case, administrative units)
   - Select an administrative unit for the scope
 
For more information about creating administrative units, see [Add and remove administrative units](~/identity/role-based-access-control/admin-units-manage.md).
 
## Assign a role using Microsoft Graph API
 

ms.service: entra-id-governance
ms.topic: how-to
ms.subservice: privileged-identity-management
ms.date: 08/29/2025
ms.author: barclayn
ms.reviewer: shaunliu
ms.custom: subject-rbac-steps, sfi-ga-nochange, sfi-image-nochange
   - Select the role scope (in this case, administrative units)
   - Select an administrative unit for the scope
 
If you try to assign a custom role that is compatible with administrative units, you aren't able to assign the role with administrative unit scope by starting from the **Roles & admins** page. To assign the custom role with administrative unit scope, you must first open the administrative unit and then assign the role. For more information, see [Assign roles with administrative unit scope](../../identity/role-based-access-control/manage-roles-portal.md). For information about creating administrative units, see [Add and remove administrative units](../../identity/role-based-access-control/admin-units-manage.md).
 
## Assign a role using Microsoft Graph API
 

MODIFIED docs/identity/authentication/concept-certificate-based-authentication-certificate-revocation-list.md

Modified by vimrang on Aug 29, 2025 3:29 PM
📖 View on learn.microsoft.com

+1 / -1 lines changed

Commit: addressed spelling error

Changes:

Before

After

   - Perform regular tests to verify that CRLs are downloadable and recognized correctly by Microsoft Entra ID.
   - Use monitoring to detect and quickly remediate any CRL availability or validation issues.
   
## CRL error eeference 
 
| Error code and message | Description | Common causes | Recommendations  |
|-------------------------|-------------|---------------|----------------------|

   - Perform regular tests to verify that CRLs are downloadable and recognized correctly by Microsoft Entra ID.
   - Use monitoring to detect and quickly remediate any CRL availability or validation issues.
   
## CRL error reference 
 
| Error code and message | Description | Common causes | Recommendations  |
|-------------------------|-------------|---------------|----------------------|

📋 Microsoft Entra Documentation Changes

📊 Summary

📝 Modified Documentation Files