Microsoft Entra ID Governance
FundamentalsConfigure Security
In brief
The documentation link was updated from guidance for all multitenant applications to guidance for all applications.
What Entra admins need to know
Administrators should use the updated guidance when reviewing app instance property lock scope.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
| Guests are not assigned high privileged directory roles | Microsoft Entra ID Free
Microsoft Entra ID P2 or Microsoft ID Governance for PIM |
| Guests can't invite other guests | Microsoft Entra ID Free |
| Guests have restricted access to directory objects | Microsoft Entra ID Free |
| App instance property lock is configured for all multitenant applicationsApp instance property lock is configured for all applications | Microsoft Entra ID Free |
| Guests don't have long lived sign-in sessions | Microsoft Entra ID P1 |
| Guest access is protected by strong authentication methods | Microsoft Entra ID Free
Microsoft Entra ID P1 recommended for Conditional Access |
| Guest self-service sign-up via user flow is disabled | Microsoft Entra ID Free |
@@ -90,7 +90,7 @@ Reduce credential-related risk by implementing modern identity standards. | [Guests are not assigned high privileged directory roles](zero-trust-protect-tenants.md#guests-are-not-assigned-high-privileged-directory-roles) | Microsoft Entra ID Free<br>Microsoft Entra ID P2 or Microsoft ID Governance for PIM | | [Guests can't invite other guests](zero-trust-protect-tenants.md#guests-cant-invite-other-guests) | Microsoft Entra ID Free | | [Guests have restricted access to directory objects](zero-trust-protect-tenants.md#guests-have-restricted-access-to-directory-objects) | Microsoft Entra ID Free |-| [App instance property lock is configured for all multitenant applications](zero-trust-protect-tenants.md#app-instance-property-lock-is-configured-for-all-multitenant-applications) | Microsoft Entra ID Free |+| [App instance property lock is configured for all applications](zero-trust-protect-tenants.md#app-instance-property-lock-is-configured-for-all-applications) | Microsoft Entra ID Free | | [Guests don't have long lived sign-in sessions](zero-trust-protect-tenants.md#guests-dont-have-long-lived-sign-in-sessions) | Microsoft Entra ID P1 | | [Guest access is protected by strong authentication methods](zero-trust-protect-tenants.md#guest-access-is-protected-by-strong-authentication-methods) | Microsoft Entra ID Free<br>Microsoft Entra ID P1 recommended for Conditional Access | | [Guest self-service sign-up via user flow is disabled](zero-trust-protect-tenants.md#guest-self-service-sign-up-via-user-flow-is-disabled) | Microsoft Entra ID Free |