We recommend that customers complete the offboarding instructions or communicate the need for extended deadline before support ends.
Beginning November 1, 2025, support for Microsoft Entra Permissions Management will end. Customers are encouraged to complete the offboarding instructions and move to another cloud infrastructure entitlements management (CIEM) solution. If you have not requested an extension, your account will be automatically offboarded on November 1, 2025.
The decision to phase out Microsoft Entra Permissions Management from the Microsoft Security portfolio was done after deep consideration of our innovation portfolio and how we can focus on delivering the best innovations aligned to our differentiating areas and partner with the ecosystem on adjacencies. We remain committed to delivering top-tier solutions across the Microsoft Entra portfolio, which includes Microsoft Entra ID, Microsoft Entra Suite (encompassing ID Protection, ID Governance, Verified ID, Internet Access, and Private Access), Microsoft Entra External ID, Microsoft Entra Workload ID, Microsoft Entra Agent ID and more.
For customers that require advanced CIEM features, we have partnered with Delinea, a leading CIEM software vendor, to offer an alternative to Microsoft Entra Permissions Management. Visit Delinea for the migration guide and datasheet to help you evaluate whether Delinea is a fit for your needs and review key migration steps.
Microsoft Defender for Cloud customers using CIEM features enabled by Microsoft Entra Permissions Management—such as permissions discovery for high-privileged identities and PCI for multicloud environments—can continue accessing these capabilities under the Defender CSPM plan. We will keep improving CIEM features to meet CNAPP requirements. For more details, see the Future of CIEM in Microsoft Defender for Cloud blog post.
We’re grateful to our customers and partners for choosing Microsoft Security. Everyone at Microsoft, Delinea, and our implementation partners are committed to working with all of you to support you during this transition to make it as seamless as possible.
-Joseph Dadzie, VP Product Management
Microsoft Entra Permissions Management is our Cloud Infrastructure Entitlement Management (CIEM) tool that provides permissions insights for identities in Azure, AWS and GCP. Today, Microsoft customers can leverage CIEM capabilities within a standalone Microsoft Entra Permissions Management product or they can also gain insight into their cloud infrastructure permissions landscape within Microsoft Defender Cloud Security Posture Management. This scope of this change is the Microsoft Entra Permissions Management product, and we will continue to invest in CIEM capabilities in Microsoft Defender for Cloud CSPM to address critical Cloud Native Application Protection (CNAPP) use cases.
Read more on this topic
Learn more about Microsoft Entra
Prevent identity attacks, ensure least privilege access, unify access controls, and improve the experience for users with comprehensive identity and network access solutions across on-premises and clouds.
Microsoft