Conditional Access

On November 3, 2026, Microsoft retired the memberOf rule operator in Microsoft Entra ID. The operator spent years in public preview with a clear “not for production” label, and plenty of tenants built access, licensing and Conditional Access on top of it anyway. Two days later, the useful question is no longer what Microsoft announced. It is this: what in my tenant is frozen right now, and who has the wrong access because of it? ...

New vulnerabilities and incident headlines change how urgent security feels. They rarely change the fundamentals. Most tenants share the same handful of gaps: weak sign-in methods, too many admins, unmanaged devices, loose app consent, and logs that expire before anyone looks at them. This is the baseline I would check first in a Microsoft Entra tenant. It is split into two horizons, this week and within 30 days, and everything uses features you already pay for. For each control you get what to do, why it matters and how to verify it. ...