MC536889 · Identity Service, SharePoint Development Services
From Microsoft Corporation
Technical Bulletin MC536889 · Published Apr 4, 2023
Message Summary
On May 3, 2023, Microsoft will update Microsoft Entra Entitlement Management. This update will remove the ability for a user in the User Administrator role to manage Entitlement Management catalogs and access packages. If your organization has relied on users having the User Administrator role to manage Entitlement Management catalogs and access packages, add those users to the Identity Governance Administrator role. This ensures that those users can manage catalogs and access packages in Entitlement Management.
We want to ensure minimal customer impact when we remove Entitlement Management permissions from the User Administrator role. By assigning admins the Identity Governance Administrator role, they will have the necessary permissions to continue managing catalogs and access packages.
In order to assign a user the Identity Governance Administrator role, follow these steps:
- Sign in to the Azure Active Directory admin center with Privileged Role Administrator permissions.
- Select Azure Active Directory > Roles and administrators.
- Select Identity Governance Administrator.
- Select Add assignments and add the users to whom you wish to assign this role.
You can also update these role assignments using Graph API. You can find more information on how to do that in our documentation.
Additionally, you can read more about roles and permissions here.
We greatly appreciate your understanding and cooperation as we release this update. In the meantime, if you have any questions or concerns, please feel free to file a support case.
