Soft delete and restore custom roles in Microsoft Entra ID

Accidentally deleting a custom Microsoft Entra role can disrupt access across an organization. Microsoft Graph now reduces that risk by soft-deleting custom role definitions, allowing administrators to inspect and restore them before deciding whether to delete them permanently.

This post walks through the complete lifecycle: creating a custom role, finding its assignments, soft-deleting it, listing deleted roles, restoring it, and permanently deleting it.

Read the whole article

How to create federated connector for MCP server running in Azure Functions protected by APIM and Entra ID

In this article, I will explain what federated connectors are, how they differ from synced connectors, and show you an example of how to create a federated connector for Microsoft 365 Copilot using Azure Functions and Azure API Management secured by Entra ID.

Read the whole article

Audit logs for custom security attributes management in Entra ID

In this article, I will show you how to access audit logs for custom security attributes management in Entra ID.

Read the whole article

What resources can be soft-deleted and restored in Microsoft Entra ID

In this article, I will describe what resources can be soft-deleted and restored in Microsoft Entra ID and how to do it through the Microsoft Graph API and Microsoft Graph PowerShell SDK.

Read the whole article

Role-based access control (RBAC) in the Graph API

In this post, I will provide a basic overview about Role-Based Access Control (RBAC) and RBAC providers exposed by the Graph API.

Read the whole article