Daily.Entra.NewsDaily AI-generated highlights from Microsoft Learn and Message Center. Browse the archive from 15 April 2025 → About this project →
This was primarily a guidance-refinement day, but two updates have clear operational consequences: Private Access alert visibility and notifications now have explicit licensing and usage prerequisites, while the App Gallery validation guide says applications using Microsoft identity platform v1 endpoints cannot use self-service validation. Global Secure Access and Internet Access troubleshooting guidance also adds more precise access requirements and investigation workflows.
The multitenant App Gallery validation guidance now states that applications using Microsoft identity platform v1 endpoints cannot be validated through self-service onboarding. It recommends migrating to v2 endpoints before starting validation.
Private Access · TroubleshootingThe documentation now requires a non-trial Microsoft Entra P1 or P2 license and at least 100 monthly active users to view alerts and receive notifications. It also clarifies Private Access licensing, least-privilege roles, Microsoft Graph permissions, and signal and alert investigation.
Global Secure Access · TroubleshootingThe remote network connectivity article now distinguishes tunnel and BGP connectivity scenarios and adds investigation steps, licensing requirements, least-privilege roles, and Microsoft Graph permissions for viewing and managing signals and alerts.
Internet Access · MonitoringThe health-signal guidance now lists licensing, roles, Microsoft Graph permissions, and log-access requirements. It also adds steps for investigating alerts and reviewing filtering and forwarding policies.
ID Governance · GovernanceThe access-package creation guidance now explains that the search box can find matching SharePoint Online roles that are not initially displayed, particularly on sites with many roles.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
The documentation now states that applications using Microsoft identity platform v1 endpoints cannot be validated through self-service App Gallery onboarding. It recommends migrating to v2 endpoints.
The configuration guide no longer includes the note about synchronization service account creation and possible errors involving multifactor or interactive authentication.
The troubleshooting guidance for SEC_E_NO_AUTHENTICATING_AUTHORITY now links to Windows Server 2025 build 26100.6905 information.
The troubleshooting guide now uses `-vAuth` instead of `-v` when starting `Start-auth.ps1`.
The access package creation documentation now explains that the search box can find matching SharePoint Online roles that are not initially displayed, especially on sites with many roles.
The documentation now recommends using the search box to find SharePoint Online roles when adding them to an access package. Search returns matching roles even when they are not initially displayed.
The Internet Access health-signal article now lists licensing, roles, Microsoft Graph permissions, and log access requirements. It also adds steps for investigating alerts and reviewing filtering and forwarding policies.
The documentation now requires a non-trial Microsoft Entra P1 or P2 license plus at least 100 monthly active users to view alerts and receive notifications. It also clarifies Private Access licensing, least-privilege roles, Graph permissions, and expanded signal and alert investigation guidance.
The article now distinguishes tunnel and BGP connectivity scenarios and adds investigation steps, licensing requirements, least-privilege roles, and Microsoft Graph permissions for viewing and managing signals and alerts.
