Microsoft Entra ID Governance: Azure subscription required to continue using guest governance features
Starting January 30, 2026, Microsoft Entra ID Governance requires tenants to link an Azure subscription to use guest governance features. Without this, creating or updating guest-scoped policies will be blocked. Existing policies run, but new actions need subscription-linked billing under the Monthly Active User model. Beginning January 30, 2026, Microsoft Entra ID Governance will require all tenants to have a linked Azure subscription to continue using Identity Governance features for guest users. This change ensures accurate billing for governance actions performed by guests and supports continued access to advanced governance capabilities. When this will happen: General availability and enforcement begin on January 30, 2026. How this will affect your organization: Who is affected: Organizations using Microsoft Entra ID Governance features for guest users (userType = Guest). Admins managing lifecycle workflows or Entra ID Governance features in entitlement management for external or guest identities. Access reviews will be included by March 31, 2026. What will happen: If your tenant does not have a linked Azure subscription, creation or updates of policies scoped to guest users using premium Entra ID Governance capabilities will be blocked. The following actions will be unavailable: Creating access reviews scoped to guest users (inactive user reviews, user-to-group affiliation helper) Creating or updating entitlement management policies involving guests, sponsor approvers, custom extensions, Verified ID, or auto-assignment rules Marking a guest as governed in entitlement management Directly assigning a guest user to an access package in entitlement management Creating or updating lifecycle workflows scoped to guest users. Existing policies will continue to run, but no new guest-governance actions can be authored without billing enabled. Once a subscription is linked, normal guest governance usage and billing will begin under the Monthly Active User (MAU) model. What you can do to prepare: Before January 30, 2026, link a valid Azure subscription to your tenant: Navigate to Entra ID → ID Governance → Dashboard In the Guest Access Governance panel, select Get Started Choose a subscription and resource group, then select Turn on Confirm your account has at least the Contributor role to enable subscription linking. Review any guest-scoped workflows, reviews, or […]
The post Microsoft Entra ID Governance: Azure subscription required to continue using guest governance features appeared first on M365 Admin.
Published on:
Learn moreWe can help you with Microsoft Entra ID Governance: Azure subscription required to continue using guest governance features
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
The November 2026 Windows security update is now available
The November 2026 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly...
Updates available for Microsoft 365 Apps for all channels
We’ve released updates to the following update channels for Microsoft 365 Apps: Current Channel Monthly Enterprise Channel Semi-Annual E...
Microsoft 365 Copilot Chat: Filter responses by content source
Microsoft 365 Copilot Chat now lets users filter responses by selecting specific content sources, ensuring answers are grounded only in chosen...
Copilot Studio – Set up third-party agent connections in conversations
We are announcing improvements to the experience of setting up connections in chats with Copilot Studio agents. These improvements will reach ...
Windows 11, version 23H2 Enterprise and Education editions have reached end of updates
Today, November 10, 2026, Windows 11, version 23H2 Enterprise and Education editions have reached end of updates. The November 2026 Windows se...
Dynamics 365 Project Operations: Optimize Project Operations – Allow to invoice future-dated transactions
Available for core and integrated. Currently, project invoices include transactions based on the invoice date, which can make it difficult to ...
Microsoft Teams: Real-time queue metrics in the Queues app on Mobile
Calling representative and Supervisor leads can view real-time call queue metrics directly from the Queues app on Mobile, giving them greater ...
Outlook: Keep folders expanded when you restart Outlook
Outlook will remember which folders and shared mailboxes you have expanded or collapsed when you restart the app. You can pick up where you le...
Microsoft Edge: Expanded enforcement controls for Data Loss Prevention connectors
Microsoft Edge for Business is expanding its existing Data Loss Prevention Enterprise Connector capabilities. Administrators will be able to c...
Microsoft Teams: Tenant policy controls who can record and transcribe
Teams administrators can use meeting policies to control who can start recording and transcription, helping organizations apply consistent mee...