Entra Conditional Access policy plans enter public preview
Conditional Access policy plans are available in public preview for Microsoft Entra ID P1 or P2 customers.
Plans group related access rules around a shared security objective, combining common conditions and exclusions with controls for individual scenarios, including AI-agent identities.
Plans run alongside existing Conditional Access policies. Migration tooling maps selected policies into a plan while leaving the originals enforcing access; new rules start Off and can be validated in report-only mode before replacing existing enforcement.
Conditional Access Administrators can access the preview in the Entra admin center. Templates and migration guidance support gradual adoption.
Partner briefing
- What it is
A framework for grouping Conditional Access rules.
- What’s changing
Public preview introduces shared plan conditions and migration tooling.
- Why it matters
Supports consistent targeting while preserving existing enforcement during validation.
- Who it affects
Entra ID P1/P2 customers, identity administrators and security partners.