Loading...

Microsoft Entra ID Governance: Azure subscription required to continue using guest governance features

Microsoft Entra ID Governance: Azure subscription required to continue using guest governance features

Starting January 30, 2026, Microsoft Entra ID Governance requires tenants to link an Azure subscription to use guest governance features. Without this, creating or updating guest-scoped policies will be blocked. Existing policies run, but new actions need subscription-linked billing under the Monthly Active User model. Beginning January 30, 2026, Microsoft Entra ID Governance will require all tenants to have a linked Azure subscription to continue using Identity Governance features for guest users. This change ensures accurate billing for governance actions performed by guests and supports continued access to advanced governance capabilities.  When this will happen: General availability and enforcement begin on January 30, 2026. How this will affect your organization: Who is affected: Organizations using Microsoft Entra ID Governance features for guest users (userType = Guest). Admins managing lifecycle workflows or Entra ID Governance features in entitlement management for external or guest identities. Access reviews will be included by March 31, 2026. What will happen: If your tenant does not have a linked Azure subscription, creation or updates of policies scoped to guest users using premium Entra ID Governance capabilities will be blocked.  The following actions will be unavailable: Creating access reviews scoped to guest users (inactive user reviews, user-to-group affiliation helper) Creating or updating entitlement management policies involving guests, sponsor approvers, custom extensions, Verified ID, or auto-assignment rules Marking a guest as governed in entitlement management Directly assigning a guest user to an access package in entitlement management Creating or updating lifecycle workflows scoped to guest users. Existing policies will continue to run, but no new guest-governance actions can be authored without billing enabled. Once a subscription is linked, normal guest governance usage and billing will begin under the Monthly Active User (MAU) model. What you can do to prepare: Before January 30, 2026, link a valid Azure subscription to your tenant: Navigate to Entra ID → ID Governance → Dashboard In the Guest Access Governance panel, select Get Started Choose a subscription and resource group, then select Turn on  Confirm your account has at least the Contributor role to enable subscription linking. Review any guest-scoped workflows, reviews, or […]

The post Microsoft Entra ID Governance: Azure subscription required to continue using guest governance features appeared first on M365 Admin.

Published on:

Learn more
Need help with this product?

We can help you with Microsoft Entra ID Governance: Azure subscription required to continue using guest governance features

If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.

M365 Admin
M365 Admin

by João Ferreira

Share post:

Related posts

OneDrive Photos on Windows: admin controls and policy support

OneDrive Photos, integrated into the OneDrive sync app for Windows 10/11, is currently available only for personal Microsoft accounts, with wo...

3 hours ago

Admin app retiring in Teams, Outlook and Microsoft365.com

The Admin app for very small businesses in Teams, Outlook, and Microsoft365.com will retire by October 2026, with rollout starting August 2026...

3 hours ago

Calls popout into a new window on the browser to support multi-tasking and collaboration during a meeting

Microsoft Teams for Web will introduce a Picture-in-Picture Call Monitor in October 2026, allowing users to manage meeting controls in a separ...

3 hours ago

Microsoft Windows Autopatch: September 2026 Windows security update requires a restart for hotpatch-enabled devices

The September 2026 Windows security update requires a restart for hotpatch-enabled devices because it is a standard update. Devices will remai...

3 hours ago

Outlook for iOS: Minimum system requirements updated to iOS 26 and above

Outlook for iOS will require iOS 26 or later starting mid-September 2026, supporting only the two latest iOS, iPadOS, and watchOS versions. Us...

3 hours ago

Allow connections to copilot.cloud.microsoft before the Copilot URL redirect

Starting September 2026, Microsoft will redirect users from m365.cloud.microsoft to copilot.cloud.microsoft. Organizations must ensure network...

3 hours ago

Prepare for the removal of WMIC from Windows 11

The Windows Management Instrumentation command-line (WMIC) utility has been removed from Windows 11, version 24H2 and later. It’s no longer av...

3 hours ago

Microsoft Agent 365: Active Users export for agent usage reporting

Microsoft Agent 365 will add an Active Users export in the Microsoft 365 admin center, allowing AI and Global Admins to generate a CSV report ...

3 hours ago

The August 2026 Windows non-security preview update is now available

The August 2026 non-security preview update is now available for Windows 11, versions 26H1, 25H2, and 24H2. Information about the contents of ...

3 hours ago

Dynamics 365 Project Operations – Assign task level schedule mode for precise planning

We are announcing the ability to assign task level schedule mode for precise planning in Dynamics 365 Project Operations. This feature will re...

11 hours ago

Newsletter

Get the latest Dynamics 365 and Power Platform content in your inbox

A curated digest of community blogs, product news, videos, and podcasts — delivered without the noise.

Weekly updates Unsubscribe anytime Fresh community picks
We use your email only for the newsletter and you can unsubscribe at any time.
By subscribing, you agree to the privacy policy.