On April 1, 2025, we announced our plans to retire Microsoft Entra Permissions Management on October 1, 2025. The decision for this retirement was made strategically to align with Microsoft's Security investments and differentiate our core identity categories. We remain committed to delivering top-tier solutions across the Microsoft Entra portfolio, which includes Microsoft Entra ID, Microsoft Entra Suite (inclusive of ID Governance, ID Protection, Verified ID, Internet Access, and Private Access), Microsoft Entra External ID, Microsoft Entra Workload ID, and more.
Existing customers will retain access to Microsoft Entra Permissions Management between April 1, 2025 and September 30, 2025. However, since the product will be retired, we are recommending that customers who have deployed the product in their environment start planning for transition and customers who have not deployed the product refrain from deployment. For Microsoft Defender for Cloud customers who utilize Cloud Infrastructure Entitlements Management (CIEM) capabilities enabled by Microsoft Entra Permissions Management, we will continue to support these essential CIEM features. Furthermore, we aim to enhance advanced CIEM capabilities in Microsoft Defender for Cloud to address critical Cloud Native Application Protection Platform (CNAPP) use cases.
To assist customers with this transition, Microsoft has partnered with Delinea, a leading independent software vendor, to provide an alternative solution to Microsoft Entra Permissions Management. This collaboration aims to ensure customers have continued access to a full spectrum CIEM solution that enables organizations to manage human and non-human identities and permissions across Azure, AWS, and GCP permissions effectively and securely.
Delinea’s CIEM solution, Privilege Control for Cloud Entitlements (PCCE), is designed to enhance security across multi-cloud environments by enforcing least privilege access. It offers capabilities that are similar to those provided by Microsoft Entra Permissions Management, including the following:
- Continuous discovery of entitlements, enabling organizations to monitor and adjust access rights for both human and non-human workload identities across Azure, AWS and GCP.
- Permissions discovery for high-risk identities including unused identities, overprovisioned active identities, unused super identities and permissions creep index (PCI)/risk score for multi-cloud environments and all identities.
- Utilizing artificial intelligence and machine learning analytics to offer insights into identity usage while ensuring adherence to security standards.
- Support for all leading Identity Providers including AWS IAM Identity Center, Okta, Ping Identity, Google Workspace and more.
- Automates remediation of suspect activity by instantly alerting, suspending access, and reporting threats via the Delinea interface and integrations with SIEM solutions.
If you’re currently using Microsoft Entra Permissions Management for your multicloud environments, we recommend transitioning to Delinea's solution at the earliest opportunity. This will ensure that the move is completed within the retirement timeline of Microsoft Entra Permissions Management. Microsoft and Delinea share a trusted partnership focused on protecting customers and are committed to supporting every customer of Microsoft Entra Permissions Management to ensure a seamless transition. Our goal, in collaboration with Delinea, is to minimize any disruption to operations and ensure that organizations can quickly benefit from the features offered in PCCE.
We truly appreciate the ongoing partnership and the trust you place in Microsoft. Looking ahead, we are committed to offering innovative solutions that enable your organization to accomplish more while also building a strong ecosystem of Microsoft Security partners to deliver comprehensive protection for any scenario that may be relevant for your organization.
To learn more about our Microsoft Entra Permissions Management retirement, refer to our blog post and offboarding guidance.
Irina Nechaeva, GM, Identity Product Marketing
Read more on this topic Add 2 or more titles & links to help readers learn more and take the next steps with the topic of this blog. For example: Docs pages, Skilling, Trial link, link to feature in the product, Pricing/feature page, previous blogs on Tech Community or MSCOM.
- Microsoft Entra Permissions Management retirement
- Microsoft Entra Permissions Management migration guidance
- Delinea CIEM features and offerings comparison
Learn more about Microsoft Entra
Prevent identity attacks, ensure least privilege access, unify access controls, and improve the experience for users with comprehensive identity and network access solutions across on-premises and clouds.
- Microsoft Entra News and Insights | Microsoft Security Blog
- Microsoft Entra blog | Tech Community
- Microsoft Entra documentation | Microsoft Learn
- Microsoft Entra discussions | Microsoft Community
Updated Apr 02, 2025
Version 1.0
Irina_Nechaeva
Microsoft
Microsoft