M365 Change Tracker

← Home

Microsoft 365 licensing changes (59)

Changes that introduce or alter a licensing, plan or add-on requirement.

See also: Default changes · Admin controls

In developmentMicrosoft Viva

Microsoft Viva: Insights and Copilot Analytics in GCC and GCC High

<p>We are expanding the availability of Viva Insights and Copilot Analytics capabilities in Microsoft 365 Government Community Cloud (GCC, or GCC-M) and GCC High (GCC-H). Availability differs for a small number of capabilities by cloud, as noted below.</p> <p>• Eligible users will see updated Insights app features and supported Insights Admin Center experiences.<br> • Adoption and Impact experiences will include supported Copilot usage and impact measures, group and app views, trends, and filters.<br> • Analysts will gain access to additional Advanced Analysis reports and queries. Supported users will also have sharing, delegation, and report-publishing capabilities.<br> Cloud-specific differences<br> • GCC only: Adoption by app for Edge and the Microsoft 365 Copilot app.<br> • GCC High: Impact supports scope, organization, and time-period filters, but not license, job-function, or usage-level filters. Creating an analysis excludes Copilot.</p>

In developmentDynamics 365 Commerce

Dynamics 365 Commerce: Design POS screen layouts in a modern browser designer

<p>Create and preview POS screen layouts in headquarters with a modern web designer that simplifies configuration and reduces design iterations.</p> <p>The Screen layout designer is modernized as a React-based web experience embedded in Commerce headquarters, with a JSON-based layout backbone replacing the legacy XML representation. The feature applies to Store Commerce point of sale (POS).</p> <p>The modernization includes these core capabilities:</p> <ul> <li><strong>Visual layout and button-grid authoring:</strong> Arrange and resize supported POS components on a drag-and-drop canvas, configure properties, and edit associated button grids and POS operation mappings in a unified experience.</li> <li><strong>Live preview:</strong> Inspect layouts and their associated button-grid operations while designing, and preview supported device sizes and orientations without distributing every design iteration to stores.</li> <li><strong>Existing layout migration:</strong> Bring existing screen layouts and button-grid configurations into the modern designer rather than recreate them from scratch.</li> <li><strong>Reusable configuration:</strong> Reuse layout templates with store-specific overrides to reduce the need to maintain duplicate layouts.</li> <li><strong>Modern usability:</strong> Work with contextual properties, familiar Fluent UI controls, and inline validation.</li> </ul> <p>Administrators enable or disable the modern designer through feature management in headquarters. Authorized users open <strong>Retail and Commerce &gt; Channel setup &gt; POS setup &gt; POS &gt; Screen layouts</strong>, select a layout, and open the designer. They configure the layout and button grids, inspect the preview, and save changes to headquarters. Administrators distribute the saved configuration to stores through the existing Commerce data distribution process. Previewing changes does not replace the distribution needed to update Store Commerce.</p> <p>Setup is performed by a Commerce administrator, who enables the feature, grants appropriate headquarters permissions, and manages layout assignments and distribution. No separate ClickOnce designer installation or Copilot license is required for manual design.</p>

In developmentMicrosoft Teams

Microsoft Teams: Facilitator in GCC

<p>Facilitator is coming to Microsoft Teams meetings in GCC. The Facilitator agent can help capture notes in real time, answers questions about the meeting, and help keep the agenda and discussion on track. A Microsoft 365 Copilot license is required to use Facilitator.</p>

Rolling outMicrosoft TeamsOutlook

Microsoft Teams: Default meeting templates

<p>Default meeting templates enable IT admins to automatically apply their organization’s preferred meeting settings whenever users schedule a Teams meeting through Outlook or Teams calendar. This helps organizations apply meeting settings (including protection settings) at scale, and reduce the need for organizers to manually configure meeting options. Only organizers with a Teams Premium (T-Pre) license assigned can use Default Meeting Templates.</p>

LaunchedPower Automate

Power Automate: Process mining - Analyze processes using object-centric process mining

<p>Real business processes rarely flow as a single, linear <em>instance</em>. Events routinely touch <em>several objects of different types at the same time</em> (for example, creating an invoice for a specific order, or shipping a package that contains items from multiple orders). Object-centric process mining captures that reality by recording events that relate to <em>many objects and object types</em> in one process, preserving their relationships end‑to‑end.</p> <p>Here's the key idea: Instead of “one case → one sequence of activities,” object-centric process mining lets <em>one event</em> belong to <em>multiple objects</em> (and object types), keeping the full context intact.</p> <p>Object-centric process mining support in Power Automate Process Mining allows you to:</p> <ul> <li>Easily ingest your object-centric event logs from Azure Data Lake or OneLake.</li> <li>Map object and event-level attributes to unlock detailed analytical opportunities.</li> <li>Visualize your object-centric process in an understandable, customizable, and easy-to-read process map.</li> <li>Visualize key metrics in a comprehensive process overview.</li> <li>Analyze your process from process execution and throughput time viewpoint.</li> <li>Focus on specific process areas by using filters or by specifying a particular path in the Process Analysis widget.</li> </ul> <p>This premium feature is automatically enabled for all Power Automate Process Mining customers.</p> <p>Business Value:</p> <p>Object-centric process mining delivers transformative insights that traditional process analysis simply can't capture. By analyzing how multiple object types, such as orders, items, deliveries, and invoices interact throughout your processes, you gain a complete, realistic view of your operations as they actually function.</p> <p>This comprehensive visibility enables you to identify hidden inefficiencies, such as bottlenecks that only appear when certain object combinations occur, or resource constraints that emerge from complex object interactions. You can pinpoint exactly where delays cascade across related objects, causing ripple effects that impact customer satisfaction and operational costs. The ability to analyze multiple dimensions simultaneously means faster root cause analysis and more accurate process optimization. Instead of piecing together fragmented views from separate analyses, you see the full picture immediately, reducing investigation time from weeks to hours and enabling data-driven decisions with confidence.</p> <p>Ultimately, object-centric process mining helps you reduce cycle times, lower operational costs, improve resource utilization, and enhance customer experience by addressing the real complexity of your business processes rather than oversimplified approximations.</p> <p>Enabled for:</p> <p>Enabled for admins/makers/marketers automatically</p>

LaunchedDynamics 365 Supply Chain Management

Dynamics 365 Supply Chain Management: Warehouse management - Streamline transfer order receiving in WOM with ASNs

<p>Receive transfer orders in warehouse-only mode with a single license plate scan. This feature uses ASN-based packing structures to speed up inbound shipment processing and improve accuracy. The packing structure is defined within the ASN, so you can streamline your receiving workflow and reduce manual steps.</p> <p>Business Value:</p> <p>Streamline your warehouse receiving process in warehouse-only mode (WOM). With advance shipping notice (ASN) packing structures, you can process transfer orders using a single license plate scan, saving time and minimizing manual work.</p> <p>Enabled for:</p> <p>Enabled by admins/makers/marketers for end users</p> <p><a href="https://learn.microsoft.com/en-us/dynamics365/release-plan/2026wave1/enterprise-resource-planning/dynamics365-supply-chain-management/streamline-transfer-order-receiving-wom-asns">Documentation</a></p>

LaunchedPower Automate

Power Automate: Cloud flows - Share Process license capacity across workflows

<p>With flow groups, you can share Process license capacity across up to 25 cloud flows, optimizing license allocation and reducing costs for organizations operating higher-volume workflows that don't need their own dedicated capacity.</p> <p>Prerequisites:</p> <ul> <li>Power Automate Process licenses available to the environment</li> <li>Cloud flows stored in solutions</li> <li>Power Automate maker permissions</li> </ul> <p>Business Value:</p> <p>Save costs, reduce management effort, and improve resource utilization by efficiently sharing capacity across multiple flows.</p> <p>Enabled for:</p> <p>Enabled for admins/makers/marketers automatically</p>

Rolling outDynamics 365 Sales

Dynamics 365 Sales: Choose the data sources AI-powered Data Enrichment uses, including CRM notes

<p>AI-powered Data Enrichment now lets admins choose which data sources the agent uses to enrich records. Outlook emails, Teams meetings, and the new CRM notes source each have their own control toggle, and the agent keeps running as long as at least one source is toggled on. Admins no longer need to connect every permission before they create the agent. With CRM notes, the agent extracts insights from manual notes added to supported records and uses them to enrich those records, with no tenant admin consent needed to use CRM notes. Only notes added by users with a Dynamics 365 Sales Premium license are used, and Dataverse search is needed only for emails and Teams meetings, since notes are already linked to their records.</p> <p>These control toggles are available automatically. Admins can turn each source on or off in the Agent behavior section of the Data Enrichment settings. Outlook emails and Teams meetings stay off until their permissions are connected, and connecting a permission never turns a source on by itself. For organizations already using the agent, CRM notes is off by default and a banner lets admins know it's available. For new organizations, CRM notes is on by default.</p>

In developmentMicrosoft EdgeMicrosoft Copilot (Microsoft 365)

Microsoft Edge: Commercial Journeys - AI-powered task completion for Microsoft 365 Copilot users

<p>Commercial Journeys helps information workers stay on top of their most important work when browsing in Microsoft Edge. Powered by AI, it proactively surfaces unfinished, new, and recurring tasks on the Copilot new tab page- with context-rich cards that explain why each task matters now. One click opens a guided execution flow that delivers ready-to-use outputs (emails, documents, presentations, and more), so users can complete their unfinished work faster with higher quality. This feature will be available to users with a Microsoft 365 Copilot Premium license in Edge.</p>

In developmentMicrosoft Teams

Microsoft Teams: Analytics for desk utilization on Teams Pro Management portal

<p>Teams admins can access utilization analytics for Teams bookable desks on Teams Pro Management portal, similar to analytics provided for meeting rooms on the portal today. For utilization analytics to be enabled, a desk needs to have one or more peripheral device associated, and the desk needs to be licensed with Teams Shared Space license or Teams Shared Space - Single Space license.</p>

LaunchedMicrosoft Teams

Microsoft Teams: Queues app for Microsoft Teams in GCC High and DoD

We’re excited to announce that the Queues app is now available in the GCC High and DoD clouds. This Teams-native app helps organizations manage customer engagements more efficiently by bringing advanced call queue and auto attendant capabilities directly into Teams. Queues app is a Teams Premium feature. For more information about Queues app, including licensing information, please see Manage Queues app for Microsoft Teams in your organization.

LaunchedMicrosoft Teams

Microsoft Teams: Automatic recording and transcription for Teams Call Queues

Administrators can enable automatic recording and transcription for Teams call queues. When enabled, calls answered by calling representatives are automatically recorded without manual action. Admins configure the feature per queue via Teams admin center or PowerShell, with controls for recording, transcription and agent access to recordings. Recordings are stored in SharePoint and available through the Queues app call history. Note: Queues app requires a Teams Premium license.

LaunchedMicrosoft Teams

Microsoft Teams: New layout when sharing content for Teams events

<p>Organizers and presenters who have access to production tools will see updated layout options when sharing content in the "Manage what attendees see" experience for Teams events. The available layouts are "Speaker focused", "Content focused", and "Content only". The new Speaker focused layout prioritizes presenter video alongside shared content for greater visibility. This feature is available for Teams events organizers with a Teams Enterprise license. This feature is available on Teams for Windows desktop and Mac desktop.</p>

LaunchedMicrosoft Teams

Microsoft Teams: Room availability signal for Teams events

In the Events app in Teams, Teams events organizers will now be able to see if the chosen room or space they have selected for their event is available at the designated time or not. This feature is available for any Teams event organizer with a Teams Enterprise license.

Rolling outMicrosoft Teams

Microsoft Teams: Upload custom backgrounds for Teams events

Organizers and presenters who have access to production tools can now upload custom backgrounds in the "Manage what attendees see" experience for Teams events. This enhancement allows organizations to display their brand identity by replacing the default backgrounds with their own images, such as company logos, event-specific artwork, or themed visuals. Custom backgrounds appear behind presenters and content, giving attendees a polished viewing experience. This feature is available for Teams events organizers with a Teams Premium license. This feature is available on Teams for Windows desktop and Mac desktop.

LaunchedMicrosoft Teams

Microsoft Teams: Enhanced bookable desk experience with Teams panel-based desk dock devices

Users have better experiences in flexible work environments with Microsoft Teams panel-based desk dock devices coming later this year. The Teams panel app now enables devices, such as the Yealink Linkhub, to enhance bookable desk experiences by indicating at-a-glance availability and letting visitors book directly on the device. Each device requires a Teams Shared Space license.

LaunchedMicrosoft Teams

Microsoft Teams: Teams room builder in the Pro Management portal

The Teams room builder is a user-friendly, visually engaging tool to help IT managers design and configure Teams Rooms traditional, signature, and flex meeting spaces. This feature, available in the Teams Rooms Pro Management portal, enables faster design, standards creation, and rollout. With a variety of equipment options and helpful criteria filters, device and license selection and purchase is simplified. Available with Teams Rooms Pro.

LaunchedMicrosoft VivaMicrosoft Copilot (Microsoft 365)

Microsoft Viva: Copilot Analytics: "All"- licensed user page Copilot dashboard

The Copilot Dashboard adoption landing page will be updated to show a unified view of Copilot adoption across the organization. Instead of the default page showing only on Microsoft 365 Copilot (licensed) usage, the page will include all Copilot user adoption, covering both M365 Copilot and Copilot Chat usage that does not require a license. A License filter will allow users to switch between All, M365 Copilot (licensed), and Copilot Chat (unlicensed) views.

LaunchedMicrosoft Teams

Microsoft Teams: Enhanced cross-platform join via SIP for Teams Rooms on Android

Enable Teams Rooms on Android to join third-party meetings via SIP, delivering seamless cross-platform interoperability. This capability ensures users can connect to external meeting services directly from Teams Rooms, maintaining a consistent and reliable meeting experience across diverse environments. Available on Teams Rooms Pro license.

Launched×2 recordsPowerPointMicrosoft Copilot (Microsoft 365)

Microsoft Copilot (Microsoft 365): Copilot can edit your document in PowerPoint

Copilot in PowerPoint lets you create, edit, and refine presentations through natural conversation, directly in your presentation. You can start a new presentation or build on an existing one, asking Copilot to generate slides, update content, improve layouts, and polish design—while preserving formatting, structure, and branding. Available to Copilot Chat users (without a Microsoft 365 Copilot license).

LaunchedMicrosoft Teams

Microsoft Teams: Building level insights on the Pro Management portal recommended actions page

<p>IT gets new building level insights on the recommended actions page in the Teams Rooms Pro Management portal. This feature intelligently identifies buildings with high Teams Rooms utilization to help IT prioritize upgrades of bring your own device (BYOD) meeting spaces and ensure consistent, high-quality user experiences throughout their office buildings. Available with a Teams Rooms Pro or Shared Space license.</p>

LaunchedMicrosoft Copilot (Microsoft 365)

Microsoft Copilot (Microsoft 365): Researcher Agent for GCC

Researcher will be available for Microsoft 365 business and enterprise users with a Microsoft 365 Copilot add-on license. Researcher is an advanced deep reasoning agent in Microsoft 365 Copilot designed to tackle complex, multi-step tasks by acting as a deep research assistant.

LaunchedFormsMicrosoft Copilot (Microsoft 365)

Microsoft Copilot (Microsoft 365): Surveys Agent and Copilot Chat in Microsoft Forms

Microsoft 365 Copilot Chat is now integrated in Microsoft Forms, including enabling the Surveys Agent from within Forms. Surveys Agent provides specialized capabilities to help with your form - from recommending and applying improvements to your form or quiz, to helping draft and send invitations, to analyzing your results. Surveys Agent is available to users with a Microsoft 365 Copilot license, and can be accessed by clicking the "Copilot" icon in Forms.

LaunchedPowerPointMicrosoft Copilot (Microsoft 365)

Microsoft Copilot (Microsoft 365): Copilot can edit your document in PowerPoint

Copilot in PowerPoint lets you create, edit, and refine presentations through natural conversation, directly in your presentation. You can start a new presentation or build on an existing one, asking Copilot to generate slides, update content, improve layouts, and polish design—while preserving formatting, structure, and branding. Available to Copilot Chat users (without a Microsoft 365 Copilot license).

LaunchedOutlook

Outlook: Scheduling with Copilot chat in classic Outlook for Windows

Users can now schedule meetings directly from chat or by clicking "Schedule with Copilot" in the UI. Simply ask Copilot to schedule a meeting with colleagues, and it will find available times, book rooms, draft agendas, and send invites—all within the chat experience. This feature is available to users with a Microsoft 365 Copilot license.

LaunchedExcelMicrosoft Copilot (Microsoft 365)

Microsoft Copilot (Microsoft 365): Excel Agent

<p>Excel Agent helps you turn data into clear charts, summaries, and insights using built‑in formulas and logic. It streamlines data preparation, formulas, and visualization so you can stay focused on the story behind the numbers. Use multi‑turn chat to refine your output or open it in Excel for full editing and collaboration. Ideal for financial forecasts, project plans, and decision‑making tools. Available to Microsoft 365 users with or without a Microsoft 365 Copilot license.</p>

LaunchedPowerPointMicrosoft Copilot (Microsoft 365)

Microsoft Copilot (Microsoft 365): PowerPoint Agent

PowerPoint Agent helps you build polished presentations with strong storytelling and visual structure. It streamlines research, formatting, and layout so you can stay focused on your message. Use multi‑turn chat to refine content or open the deck in PowerPoint for full editing and collaboration. Ideal for executive presentations, strategic updates, and market overviews. Available to Microsoft 365 users with or without a Microsoft 365 Copilot license.

Rolling outWordMicrosoft Copilot (Microsoft 365)

Microsoft Copilot (Microsoft 365): Word Agent

Word Agent helps you handle research, structure, and formatting so you can stay focused on your ideas. Use multi‑turn chat to refine your draft or open it in Word for full editing and collaboration. It’s designed for long‑form, information‑dense work—like strategic plans, policy documents, and technical papers—making it easier to turn complex material into clear, well‑written content. Available to Microsoft 365 users with or without a Microsoft 365 Copilot license.

In developmentWordMicrosoft Copilot (Microsoft 365)

Microsoft Copilot (Microsoft 365): [Copilot Chat] Agent mode in Word enables conversational support to create, edit and refine document content from chat

Available for M365 users without a M365 Copilot license. From Chat, you can use natural language to generate and direct edits to new and existing documents, when in an Edit mode. In this mode, Copilot will ask clarifying questions if needed, and after making changes will recap actions take and recommended next steps. Changes to the document are supported with controls in the document canvas to review changes made.

LaunchedExcelMicrosoft Copilot (Microsoft 365)

Microsoft Copilot (Microsoft 365): [Copilot Chat] Agent Mode in Excel

Available for Microsoft 365 subscribers without a Microsoft 365 Copilot license. Agent Mode is releasing to Copilot in Excel for the web, Windows and Mac, enabling users to build and edit workbooks with Copilot using multi-step workflows. When you're updating budgets, creating financial models, or analyzing data, Agent Mode uses Excel's most powerful tools like tables, charts, PivotTables, and formulas to help you get the job done.

LaunchedOutlook

Outlook: Prepare for meetings with Copilot in classic Outlook for Windows

With so many of us in back-to-back meetings, it can be a real struggle to stay on top of pre-reads, action items, and even what each meeting is about. Copilot quickly prepares you for meetings within minutes by bringing real-time insights and summarizing relevant context, tasks, documents, and other resources. You can also chat directly with Copilot to prepare more deeply, to ensure you're ready to go. This feature is already available in the new Outlook for Windows, Web, Mac, and Mobile and is now being adding to classic Outlook for Windows. It is only available for users with a Microsoft 365 Copilot license.

LaunchedMicrosoft Copilot (Microsoft 365)

Microsoft Copilot (Microsoft 365): Scheduling with Copilot

Scheduling with Copilot: Users can now schedule meetings directly from chat. Simply ask Copilot to schedule a meeting with colleagues, and it will find available times, book rooms, draft agendas, and send invites—all within the chat experience. This feature will roll out in phases and is expected to be generally available in Copilot chat across all endpoints for users with a Microsoft 365 Copilot license in the coming months.

LaunchedOutlook

Outlook: Updated Copilot Button for Android

We are updating the UI for Copilot Chat so that the button is separate from the mail and event compose buttons. This feature will be available for users with a Copilot license.

LaunchedMicrosoft Teams

Microsoft Teams: 1080P Resolution in Teams Town Halls

Teams town hall will soon bring 1080P resolution to Teams town hall. This enhancement brings a sharper appearance with more visual clarity to videos, images, and other visual assets within your online events. This feature is available for town halls created by organizers with a Teams Premium license.

LaunchedOutlook

Outlook: Summarize email with Copilot chat in Outlook

Easily summarize your email and attachments with Copilot chat. This will be available to Android and iOS users with a Microsoft 365 Copilot license who have pinning enabled. Updated April 21, 2026: We have cancelled rollout of this feature to Desktop, Mac, Web and both Classic and New Outlook for Windows at this time. We apologize for the inconvenience.

LaunchedOutlookMicrosoft Copilot (Microsoft 365)

Microsoft Copilot (Microsoft 365): Summarize email with Copilot chat in Outlook

Users without a Microsoft 365 Copilot license can now easily summarize emails in a single click, using Copilot chat. Users must have access to Copilot chat and pinning enabled to utilize. This change is coming to both Classic and New Outlook for Windows #newoutlookforwindows

In developmentMicrosoft 365 Admin Center

Microsoft 365 Admin Center: Admin Copilot available in GCC

Microsoft Copilot in the Microsoft 365 admin center will soon be available in government clouds (GCC). Tenants that have at least one Microsoft 365 Copilot license will be able to access Copilot in the Microsoft 365 admin center via the Copilot button on the top right corner of the screen.

Rolling outMicrosoft Teams

Microsoft Teams: AI assistant for admins in the Pro Management portal

IT admins can optimize their time and resources by utilizing the Pro Management Portal AI assistant. It offers comprehensive answers to questions about Teams meeting spaces and management solutions and delivers data and insights specific to inventory in the organization’s environment. This feature is available with Teams Rooms Pro and does not require a Microsoft 365 Copilot license.

Rolling outMicrosoft Teams

Microsoft Teams: Users can view app ratings before installing apps or agents

We have improved user options for sharing a link for a Teams app or a Microsoft 365 Copilot agent in a chat. Links to apps and agents will have a new preview card with user ratings for users to consider before installing apps or agents in Teams and clear actions like Add (which installs the app or agent) and View detail. A Microsoft 365 Copilot license is not required to share Copilot agent links but may be required to install and use the agent.

Rolling outMicrosoft Teams

Microsoft Teams: Decorate your background for GCC and GCC High environments (Premium)

Decorate your background is now available to customers in the GCC and GCC High environments. Decorate your background is a generative background effect in Teams that makes meetings more fun and personal by using AI to spruce up your meeting background. Blend your physical and digital spaces, enabling you to revamp what’s seen of your physical meeting space for each call. This technology allows for effortless room clean-ups, adding virtual plants, or festive decorations for special events. Decorate your background requires a Teams Premium license.

LaunchedMicrosoft Copilot (Microsoft 365)OneDrive

OneDrive: Agents in OneDrive

Find yourself referencing the same files using Copilot in OneDrive? We are bringing the power of agents to OneDrive, allowing you to build, use, and share your own agents using files and content stored in your OneDrive. This feature requires a Microsoft Copilot for Microsoft 365 license and will be available to customers on OneDrive Web.

In developmentMicrosoft Copilot (Microsoft 365)OneDrive

OneDrive: Convert Copilot response into a Word file

Like a summary or FAQ that Copilot generated for you? Now, with one click, you can convert any Copilot response into a Word document. This feature requires a Microsoft Copilot for Microsoft 365 license and will be available to commercial customers on OneDrive Web.

In developmentOneDriveMicrosoft Copilot (Microsoft 365)

OneDrive: Create a presentation from a Word file

With Copilot, you can create the first draft of your presentation using a Word file in just a single click. This feature requires a Microsoft Copilot for Microsoft 365 license and will be available to commercial customers on OneDrive Web.

GAMicrosoft Entra IDReporting

License Usage

The License Usage page in the Microsoft Entra admin center helps customers optimize their Entra licenses by providing visibility into feature usage across their tenant. It shows how many Entra ID P1, P2, and Suite licenses you own, along with usage of key features such as Conditional Access and risk‑based Conditional Access mapped to each license type. You can also review usage trends over the past six months. This view gives you a clearer understanding of your license footprint, the value you’r

v1.0Microsoft GraphGroups

Updated the assignedLabels property on the group resource to support assigning sensitivity labels to cloud security g…

Updated the assignedLabels property on the group resource to support assigning sensitivity labels to cloud security groups in addition to Microsoft 365 groups. For cloud security groups, this property is immutable once set. Requires a Microsoft Entra ID P1 license. Added the Group.Security and Group.Security.Policies setting templates to the groupSettingTemplate resource. Use these templates to configure tenant-wide or per-object settings for cloud security groups, including enabling Microsoft Information Protection (MIP) sensitivity labels ( EnableMIPLabels ) and controlling guest access ( AllowToAddGuests ). Requires a Microsoft Entra ID P1 license. Added the *Group.ManageProtection.All* delegated permission as the least privilege permission for updating the assignedLabels property on the group resource.