Tuesday, 7 July 2026

Azure Services Wizard renewal now requires Microsoft Graph admin consent

The Azure Services Wizard guidance now states that, starting with Configuration Manager 2409, Azure services use Microsoft Graph. Renewing the secret key requires consent for Microsoft Graph `Directory.Read.All`; the Cloud Application Administrator role cannot grant that consent.

• Configuration Manager · General

  Secret renewal prerequisite clarified for Configuration Manager 2409

  The Azure Services Wizard documentation replaces the earlier Cloud Application Administrator requirement with a more specific Microsoft Graph consent requirement. The account signing in to renew the secret key must be able to grant admin consent for `Directory.Read.All`; Global Administrator is one stated option.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.