Summary
Microsoft has extended support for existing Microsoft Entra ID MemberOf rule operator configurations through March 31, 2027, specifically for organisations with Entra ID Governance. A new replacement capability is scheduled for late 2026. Administrators should review current group memberships and plan to migrate configurations manually or use the upcoming migration paths before the final deadline.
Administrator impact: Review existing groups that rely on the MemberOf rule operator and prepare to migrate them to the new capability when it becomes available.
End user impact: No direct end user impact is expected.
Score rationale: This is an important operational extension for governance features requiring planned migration before March 2027 to avoid automatic processing changes.
Support for existing Microsoft Entra ID MemberOf rule operator configurations is extended through March 31, 2027, for organizations with Entra ID Governance. A new replacement capability is planned for late 2026, with migration options and automatic migration by the deadline. No immediate action is required.
Published: 6 Oct 2026
Expires: 1 May 2027
Last updated: 6 Oct 2026
Action by 31 Mar 2027
Service: Microsoft Entra
Tag: User impact, Admin impact, Retirement
Microsoft Message
As previously announced in MC1448379 (August 5, 2026), the public preview of the MemberOf rule operator in Microsoft Entra ID is ending, with a retirement date of November 3, 2026.
Because your organization has Microsoft Entra ID Governance, we are extending processing for your existing MemberOf-based groups, dynamic administrative units, and entitlement management auto-assignment policies through March 31, 2027. This is a targeted migration extension, not a change to the previously announced retirement for other customers.
Microsoft is developing a replacement MemberOf capability on a new architecture as part of Microsoft Entra ID Governance, targeted for late 2026. The extension is intended to let you move directly to that capability instead of first moving to an interim solution and then migrating again. Your existing MemberOf configurations will keep working during the extension, and you will have several options for moving them to the new capability.
Rollout schedule
- Support for existing MemberOf-based configurations: through March 31, 2027
- Replacement capability targeted for availability: late 2026
- Migration guidance for the replacement capability: available when the replacement capability launches
Impact on your organization
Who is affected
Organizations with Microsoft Entra ID Governance or higher licenses that manage dynamic membership groups, dynamic administrative units, or entitlement management auto-assignment policies that use the MemberOf rule operator in Microsoft Entra ID
Platforms/Services
- Microsoft Entra ID
- Microsoft Entra ID Governance
What will happen
- Existing MemberOf-based configurations will continue to operate and be supported through March 31, 2027.
- Microsoft plans to make the replacement capability available in Microsoft Entra ID Governance in late 2026.
- Microsoft will provide migration guidance and supported migration options when the replacement capability becomes available.
- After the replacement capability becomes available, you will have a transition period before the March 31, 2027 deadline.
- Microsoft will automatically migrate configurations that still use the MemberOf rule operator by March 31, 2027.
Action required and recommendations
No immediate action is required. When the replacement capability becomes available, you can choose one of the following options:
- Migrate your groups yourself. You can move groups to the new capability in bulk.
- Ask Microsoft to migrate your groups. If you want Microsoft to move your groups for you before the deadline, contact your Microsoft account manager to confirm.
- Take no action. Your groups will keep working, and Microsoft will automatically migrate any configurations that still use MemberOf after March 31, 2027.
We also recommend that you:
- Review existing groups that use the MemberOf rule operator and identify the configurations to migrate.
- Monitor Message center for details about the replacement capability and migration guidance.
Learn more
Additional guidance, migration documentation, and support resources will be published when the replacement capability becomes available.
Compliance considerations
Question: Does the change alter how existing customer data is processed, stored, or accessed?
Answer: Yes. Groups that still use the MemberOf rule operator at the end of the extension period will be migrated automatically to the replacement capability by March 31, 2027.