Skip to content

Update verbiage from Azure to Entra in SSPR policy doc#1913

Open
SamErde wants to merge 1 commit intoMicrosoftDocs:mainfrom
SamErde:patch-1
Open

Update verbiage from Azure to Entra in SSPR policy doc#1913
SamErde wants to merge 1 commit intoMicrosoftDocs:mainfrom
SamErde:patch-1

Conversation

@SamErde
Copy link
Copy Markdown

@SamErde SamErde commented Mar 13, 2026

This pull request updates documentation to improve consistency in terminology regarding administrator roles and policies in Microsoft Entra ID. The most important changes clarify references to "Entra administrator" instead of "Azure administrator" throughout the self-service password reset (SSPR) policy documentation.

Terminology consistency:

  • Updated references from "Azure administrator" to "Entra administrator" in descriptions of SSPR restrictions and policy differences in concept-sspr-policy.md. [1] [2]
  • Changed references from "Azure administrator roles" to "Entra administrator roles" in the list of affected roles for the two-gate policy.

Copilot AI review requested due to automatic review settings March 13, 2026 06:48
@prmerger-automator
Copy link
Copy Markdown
Contributor

@SamErde : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change.

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates SSPR policy documentation terminology to align administrator role references with Microsoft Entra branding, improving consistency within the identity docs set.

Changes:

  • Replaced “Azure administrator(s)” references with “Entra administrator(s)” in SSPR policy explanations.
  • Updated role list intro text from “Azure administrator roles” to “Entra administrator roles.”

You can also share your feedback on Copilot code review. Take the survey.

In Microsoft Entra ID, there's a password policy that defines settings like the password complexity, length, or age. There's also a policy that defines acceptable characters and length for usernames.

When self-service password reset (SSPR) is used to change or reset a password in Microsoft Entra ID, the password policy is checked. If the password doesn't meet the policy requirements, the user is prompted to try again. Azure administrators have some restrictions on using SSPR that are different to regular user accounts, and there are minor exceptions for trial and free versions of Microsoft Entra ID.
When self-service password reset (SSPR) is used to change or reset a password in Microsoft Entra ID, the password policy is checked. If the password doesn't meet the policy requirements, the user is prompted to try again. Entra administrators have some restrictions on using SSPR that are different to regular user accounts, and there are minor exceptions for trial and free versions of Microsoft Entra ID.
In Microsoft Entra ID, there's a password policy that defines settings like the password complexity, length, or age. There's also a policy that defines acceptable characters and length for usernames.

When self-service password reset (SSPR) is used to change or reset a password in Microsoft Entra ID, the password policy is checked. If the password doesn't meet the policy requirements, the user is prompted to try again. Azure administrators have some restrictions on using SSPR that are different to regular user accounts, and there are minor exceptions for trial and free versions of Microsoft Entra ID.
When self-service password reset (SSPR) is used to change or reset a password in Microsoft Entra ID, the password policy is checked. If the password doesn't meet the policy requirements, the user is prompted to try again. Entra administrators have some restrictions on using SSPR that are different to regular user accounts, and there are minor exceptions for trial and free versions of Microsoft Entra ID.
## Administrator reset policy differences

By default, administrator accounts are enabled for self-service password reset, and a strong default *two-gate* password reset policy is enforced. This policy may be different from the one you defined for your users, and this policy can't be changed. You should always test password reset functionality as a user without any Azure administrator roles assigned.
By default, administrator accounts are enabled for self-service password reset, and a strong default *two-gate* password reset policy is enforced. This policy may be different from the one you defined for your users, and this policy can't be changed. You should always test password reset functionality as a user without any Entra administrator roles assigned.
A two-gate policy applies in the following circumstances:

* All the following Azure administrator roles are affected:
* All the following Entra administrator roles are affected:
@learn-build-service-prod
Copy link
Copy Markdown
Contributor

Learn Build status updates of commit 1977d20:

✅ Validation status: passed

File Status Preview URL Details
docs/identity/authentication/concept-sspr-policy.md ✅Succeeded

For more details, please refer to the build report.

@v-regandowner
Copy link
Copy Markdown
Contributor

@Justinha

Can you review the proposed changes?

IMPORTANT: When the changes are ready for publication, adding a #sign-off comment is the best way to signal that the PR is ready for the review team to merge.

#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants