Azure Role assignments can now be governed via Entitlement Management

Why it matters: In preview

You can now govern eligible and active assignments to Azure roles at the Management Group, Subscription, and Resource Group levels directly through access packages. This brings role assignment into the same request, approval, and lifecycle governance model as apps, groups, and more - making it easier to manage access to Azure resources at scale while aligning to least privilege and just-in-time access.

Affected: Microsoft Entra ID, Entitlement Management

View at Microsoft → Copy summary