Thursday, 3 September 2026

Managed identity creation guidance adds a 98% directory quota threshold

The period’s meaningful changes affect managed identity creation and app publishing. Managed identity guidance now identifies a 98% tenant directory-usage threshold that blocks new or recreated service principals, while app publishers are instructed to provide a Partner One ID tied to their Microsoft AI Cloud Partner Program organization. The other two updates are routine documentation maintenance: a test-only PFX password example gains a trailing exclamation mark, and an app gallery URL drops its `/en-US` locale segment.

• Workload ID · General

  Managed identity creation is blocked at or above 98% directory usage

  The managed identities FAQ now states that creating a managed identity is blocked when the resulting directory usage reaches or exceeds 98% of the tenant quota. The limitation applies to new or recreated service principals; existing identities and assignments continue to work. Soft-deleted objects count toward the quota, and reducing usage or increasing the quota enables retries.

• Entra ID · Developer

  App publishers must provide a Partner One ID

  The app validation and publishing prerequisites now instruct publishers to provide a Partner One ID associated with their Microsoft AI Cloud Partner Program organization, with guidance for finding help if they do not know the ID.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.