Entra agent blueprints: restrict who can create them
From 4 November 2026 default Entra users can create agent blueprints unless you turn it off. What changes, who should keep the ability, and how to restrict it.
Focus area
Deep dives covering Governance.
Guides, runbooks, and opinions focused on Governance.
An Azure Policy baseline built on Microsoft Learn guidance: audit first, stage rollout, handle exemptions and remediation, then move to enforcement.
Jump into the guided path, or browse everything if you’re after something specific.
Hop between landing zones, identity, networking, and more.
From 4 November 2026 default Entra users can create agent blueprints unless you turn it off. What changes, who should keep the ability, and how to restrict it.
The customer-initiated window to move VPN Gateway off Basic public IPs has closed. How to check your gateways have moved, handle a pending one, and validate.
A hands-on walkthrough of Azure Landing Zones (ALZ): what they are, why they matter, and a runbook-style path to deploying a secure platform foundation.
Search
Type an Azure service, control, or tag. Results refresh after every deploy.
Examples: landing zone policy, workload identity, vpn gateway