check before: 2026-01-30
Product:
Entra, Microsoft 365 Apps
Platform:
Online, World tenant
Status:
Change type:
Feature update, User impact, Admin impact
Links:
Details:
Summary:
Starting January 30, 2026, Microsoft Entra ID Governance requires tenants to link an Azure subscription to use guest governance features. Without this, creating or updating guest-scoped policies will be blocked. Existing policies run, but new actions need subscription-linked billing under the Monthly Active User model.
Details:
Introduction
Beginning January 30, 2026, Microsoft Entra ID Governance will require all tenants to have a linked Azure subscription to continue using Identity Governance features for guest users. This change ensures accurate billing for governance actions performed by guests and supports continued access to advanced governance capabilities.
When this will happen:
General availability and enforcement begin on January 30, 2026.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2026-01-31
updated:
2026-01-31
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
Starting January 30, 2026, Microsoft Entra ID Governance will require organizations to link an Azure subscription to create or update guest governance policies, although existing policies will remain functional.
Direct effects for Operations**
Guest Governance Policy Creation
Without a linked Azure subscription, organizations will be unable to create or update guest-scoped policies, impacting governance capabilities for guest users.
- roles: IT Admin, Compliance Officer
- references: https://learn.microsoft.com/entra/id-governance/microsoft-entra-id-governance-licensing-for-guest-users
Access Reviews for Guests
The inability to create access reviews for guest users will hinder compliance and security audits, affecting the organization's ability to manage guest access effectively.
- roles: IT Admin, Security Analyst
- references: https://learn.microsoft.com/entra/id-governance/microsoft-entra-id-governance-licensing-for-guest-users
Entitlement Management Policies
Organizations will be blocked from creating or updating entitlement management policies involving guests, which may disrupt user access management processes.
- roles: IT Admin, Business Analyst
- references: https://learn.microsoft.com/entra/id-governance/microsoft-entra-id-governance-licensing-for-guest-users
Lifecycle Workflows for Guests
The inability to create or update lifecycle workflows for guest users will lead to inefficiencies in managing guest user lifecycles, potentially increasing security risks.
- roles: IT Admin, HR Manager
- references: https://learn.microsoft.com/entra/id-governance/microsoft-entra-id-governance-licensing-for-guest-users
Internal Documentation Updates
Failure to prepare for the subscription linkage may result in outdated internal documentation, leading to confusion and mismanagement of guest governance features.
- roles: IT Admin, Documentation Specialist
- references: https://learn.microsoft.com/entra/id-governance/microsoft-entra-id-governance-licensing-for-guest-users
Configutation Options**
XXXXXXX ... paid membership only
Opportunities**
XXXXXXX ... free basic plan only
Potentional Risks**
XXXXXXX ... paid membership only
Data Protection**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
Hypothetical Work Council Statement**
XXXXXXX ... paid membership only
DPIA Draft**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 5 days ago ago
