MicrosoftDocs/entra-docs/docs/id-governance

Merge pull request #14531 from markwahl-msft/mwahl-agent-perms clarify AP delegated perms

initial revision

Merge pull request #14529 from MicrosoftDocs/repo_sync_working_branch Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/entra-docs (branch main)

Fix formatting for prerequisite roles section

Remove straggler ms.author and author fields for MSec files (#14465)

Spelling fixes (#2125) * spelling an auto space removal * Apply suggestion from @ShawnKupfer --------- Co-authored-by: Shawn Kupfer <60445862+ShawnKupfer@users.noreply.github.com>

Update sponsored guest portal navigation Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Add guest lifecycle policies documentation (#14501) * Add guest lifecycle policies documentation Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * Flatten guest lifecycle policy navigation Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * Add sponsored guest management documentation Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Clarify default 365-day expiration in ARM API example (#2058) The ARM API example under "Assign a role using Azure Resource Manager API" shows a request body with "duration": "P365D" but does not explain what this default means or how to change it. Readers who copy the example verbatim end up with role assignments that expire after 365 days without a signal that this is configurable. This change adds a NOTE block immediately after the request body code fence, explaining that the duration field sets a bounded 365-day eligibility and that permanent eligibility requires the role management policy at the target scope to allow it. Also bumps ms.date to reflect the update.

remove references to Meta Workplace (#14467)

Merge remote-tracking branch 'upstream/main' into jconley76-guest-lifecycle-licensing # Conflicts: # docs/id-governance/microsoft-entra-id-governance-licensing-for-guest-users.md

Update guest lifecycle workflow licensing Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/entra-docs (branch main) (#14438) * Correct PIM-for-Groups credential-protection scope: eligible members and owners are protected (#2049) * Scope the PIM-for-Groups credential-reset note to role-assignable groups * Correct role-assignable group protection scope: eligible members and owners are also protected * Align credential-change wording with groups-concept; bump ms.date * Tighten role-assignable protection wording; consistent member/owner terminology * Revise SSO configuration instructions and update tenant URL for Rootly (#2114) * Updated doc with correct tenant URL for rootly * Revise SSO configuration instructions for Rootly Updated instructions for configuring SSO on Rootly, including specific steps and details for the setup process. --------- Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: Mike Crowley <Mike-Crowley@users.noreply.github.com> Co-authored-by: Vetle Skorpen <16135857+vskorpen@users.noreply.github.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com>

Add access reconciliation documentation (#14270) * Add access reconciliation overview Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 8c195cf0-8e3a-4d82-b4df-974139d9c3f2 * Refine reconciliation documentation terminology Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 8c195cf0-8e3a-4d82-b4df-974139d9c3f2 * Clarify reconciliation capability categories Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 8c195cf0-8e3a-4d82-b4df-974139d9c3f2 * Expand access drift report guidance Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 8c195cf0-8e3a-4d82-b4df-974139d9c3f2 * Document access drift UX details Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 8c195cf0-8e3a-4d82-b4df-974139d9c3f2 * Revise report refresh frequency and data staleness Updated the report generation frequency and data freshness information in the entitlement management reports documentation. * Update entitlement-management-reports.md --------- Copilot-Session: 8c195cf0-8e3a-4d82-b4df-974139d9c3f2

Merge pull request #14367 from tafra00/tafra00/add-tenant-governance-related-licensing-links Add related service licensing links

Correct Microsoft author alias Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 9709e5fb-e6d3-4a95-a0eb-205bb17c3c2c

Move licensing links to related content Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 9709e5fb-e6d3-4a95-a0eb-205bb17c3c2c

Add related service licensing links Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 9709e5fb-e6d3-4a95-a0eb-205bb17c3c2c

update license requirements for hibob and fixed section alignment in license doc (#14363) * update license behavior * updated toc and removed author with invalid alias --------- Co-authored-by: Chetan Desai <chmutali@microsoft.com>

Merge pull request #14362 from jconley76/jconley76-update-access-package-sharepoint-roles Document SharePoint site role search box for access packages