Prevent users from creating new agent identity blueprints
Starting 4 November 2026, every user without an Entra role can create agent identity blueprints in your tenant, unless you turn it off first.
Microsoft announced this on 13 October in MC1506733 - Action may be required: Review who can create agents in Microsoft Entra. Rollout starts in early November and should finish by late November 2026.
Published on:
Learn moreWe can help you with Prevent users from creating new agent identity blueprints
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
Cloud Sync provisioning agent fails to start with a gMSA
This is a knowledge base item. I hope it will help you someday. The issue# When installing an additional Microsoft Entra Cloud Sync provisioni...
From WordPress to Hugo on Cloudflare
janbakker.tech is now running on Cloudflare, and that was long overdue. When I started my blog in 2021, I picked what I knew at that time, and...
Where to store your Microsoft 365 passkey?
Check out this article via web browser: Where to store your Microsoft 365 passkey? Microsoft 365 (Entra ID) has supported passkeys for a long ...
Entra ID telephony providers for SMS and voice MFA: first look
Check out this article via web browser: Entra ID telephony providers for SMS and voice MFA: first look What was announced Microsoft has publis...
Finally a smooth(er) passkey onboarding experience in Microsoft 365!
Check out this article via web browser: Finally a smooth(er) passkey onboarding experience in Microsoft 365! Microsoft is doing a lot to enhan...
How to create a Microsoft 365 device-bound passkey on macOS
Check out this article via web browser: How to create a Microsoft 365 device-bound passkey on macOS I did a discovery today, and I want to sha...
How to add granular amr claims to your SAML apps in Entra ID
Check out this article via web browser: How to add granular amr claims to your SAML apps in Entra ID In my last post, I covered how Entra...
Lock or sign-out when Yubikey is removed from the device
Check out this article via web browser: Lock or sign-out when Yubikey is removed from the device I didn’t know there was already a solut...
Writing Maester tests using AI – From idea to Pull Request
Check out this article via web browser: Writing Maester tests using AI – From idea to Pull Request I love Maester. No doubt about that. ...
Admin control for SSO prompts in Windows; finally, an off switch!
Check out this article via web browser: Admin control for SSO prompts in Windows; finally, an off switch! If you’ve been paying attentio...