check before: 2026-02-01
Product:
Entra, Microsoft 365 admin center, Microsoft Graph
Platform:
Developer, Web, World tenant
Status:
Rolling out
Change type:
Links:
Details:
Admins or app owners can now safely pause an app’s access to Entra protected resources without deleting it or disrupting configuration. When deactivated, the app and its service principals globally (across tenants) can’t request new tokens and user sign ins are blocked, while existing tokens simply expire on their normal schedule. This makes it easy for admins to temporarily freeze suspicious or unused apps during investigations, bulk cleanup, or tenant hygiene work. This capability is now available in the Entra admin center (App registrations, Enterprise apps) and Microsoft Graph API.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
General Availability, Preview
Created:
2026-01-13
updated:
2026-02-20
Public Preview Start Date
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
More Info URL
XXXXXXX ... free basic plan only
summary for non-techies**
Microsoft Entra now allows admins to temporarily deactivate an app's access to resources without deleting it, preventing new token requests and user sign-ins while existing tokens expire naturally, and this feature is accessible via the Entra admin center and Microsoft Graph API.
Direct effects for Operations**
App Access Interruption
Deactivating an app will block user sign-ins, preventing access to services that rely on the app, which can disrupt workflows and productivity.
- roles: End Users, IT Support
- references: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/deactivate-application-portal
Token Expiration
Existing tokens will expire normally, but users may experience confusion or frustration if they are suddenly unable to access services they were using.
- roles: End Users, Application Owners
- references: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/deactivate-application-portal
Investigation Delays
While the app is deactivated for investigation, any related issues may take longer to resolve, impacting overall service reliability.
- roles: IT Security, Application Owners
- references: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/deactivate-application-portal
User Experience Degradation
Users may face degraded experience due to unexpected app deactivation, leading to dissatisfaction and potential loss of trust in IT processes.
- roles: End Users, IT Support
- references: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/deactivate-application-portal
Increased Support Tickets
Deactivation may lead to an increase in support tickets as users report issues accessing services, straining IT resources.
- roles: IT Support, Help Desk Staff
- references: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/deactivate-application-portal
Configutation Options**
XXXXXXX ... paid membership only
Opportunities**
XXXXXXX ... free basic plan only
Potentional Risks**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
change history
| Date | Property | old | new |
| 2026-02-20 | RM Release | March CY2026 | February CY2026 |
| 2026-02-20 | RM Status | In development | Rolling out |
| 2026-02-20 | RM Description | Admins or app owners can now safely pause an app’s access to Entra protected resources without deleting it or disrupting configuration. When deactivated, the app and its service principals globally (across tenants) can’t request new tokens and user sign ins are blocked, while existing tokens simply expire on their normal schedule. This makes it easy for admins to temporarily freeze suspicious or unused apps during investigations, bulk cleanup, or tenant hygiene work. This capability will initially be available via Microsoft Graph API. | Admins or app owners can now safely pause an app’s access to Entra protected resources without deleting it or disrupting configuration. When deactivated, the app and its service principals globally (across tenants) can’t request new tokens and user sign ins are blocked, while existing tokens simply expire on their normal schedule. This makes it easy for admins to temporarily freeze suspicious or unused apps during investigations, bulk cleanup, or tenant hygiene work. This capability is now available in the Entra admin center (App registrations, Enterprise apps) and Microsoft Graph API. |
Last updated 3 weeks ago ago
