Prevent unauthorized changes to AD groups with AD group enforcement
For customers leveraging group provisioning to AD, this capability ensures that changes to AD groups remain consistent with those managed in Microsoft Entra. With this preview, you can designate specific AD groups so that modifications to those groups can only be made through the Entra provisioning service. Changes made outside of Entra are blocked, helping prevent drift before it occurs and maintaining alignment between Entra ID and AD groups.
Learn more: AD group enforcement documentation.
Terms in this update
This is in the weekly digest for week 40 · What changed this week? →
More Entra updates
SCIM 2.0 APIs for Microsoft Entra ID in US Gov cloud
Account Discovery
Cross tenant group synchronization allows organizations to synchronize security groups across Microsoft Entra tenants
Workload identity-based authentication for SAP SuccessFactors provisioning integrations
Account Discovery
Prefetch Workday termination data to customize account disable logic
Text by Microsoft, from Microsoft's documentation. Features and dates may change. Terms and the timeline are added by 365Fanatic.
