← Back
(Updated) Microsoft Entra: Cross-tenant security group synchronization
MC1198077 · build prod-20251231-200323
Category
stayInformed
Severity
normal
Major change
False
Last modified
2026-01-07 22:52:18
Summary source
Azure OpenAI (gpt-4.1)
Action by (Graph)
Action by (AI)
2026-01-25 00:00:00
Services
Microsoft Entra
Tags
Updated message, New feature, User impact, Admin impact
Master tags
Admin, Security
Roadmap IDs
518221

One-line summary

Cross-tenant group synchronization in Entra enables syncing security groups across tenants for easier resource sharing and centralized management, available with Entra ID Governance/Suite license.

Similar updates

More like this
MC1191924 Microsoft Entra ID: Enhance protection of the authentication experience by blocking external script injection
Microsoft Entra ID: Enhance protection of the authentication experience by blocking external script injection Microsoft Entra ID sign-in will enforce a stricter Content Security Policy, blocking non-Microsoft scripts and injected code, starting rollout in October 2026 to enhance security against XSS threats. Introduction As part of Microsoft’s .
MC1103608 Microsoft Entra ID: Change in guest authentication experience for B2B collaboration
Microsoft Entra ID: Change in guest authentication experience for B2B collaboration Starting July 2025, guest users signing in via Entra ID B2B will use their home organization's sign-in page, improving clarity and reducing confusion during cross-tenant authentication. This message only applies to tenants that use B2B (business-to-business).
MC1187672 Get ready for security agents: Microsoft Security Copilot will be included in Microsoft 365 E5
Get ready for security agents: Microsoft Security Copilot will be included in Microsoft 365 E5 Security Copilot with new AI agents is now included at no extra cost for Microsoft 365 E5 customers, rolling out over the coming months across Defender, Entra, Intune, and Purview. Introduction: Microsoft Security Copilot agents are directly built into.
MC1183299 Microsoft Entra: Soft deletion and restoration for cloud security groups
Microsoft Entra: Soft deletion and restoration for cloud security groups Microsoft Entra adds soft deletion for cloud security groups, allowing restoration within 30 days to recover settings, ownership, and membership, reducing rebuild needs after accidental or malicious deletion. To help organizations recover from accidental or malicious.
MC1198079 Migrate User Data Across Tenants: Mailboxes, OneDrives, and Teams Chats
Migrate User Data Across Tenants: Mailboxes, OneDrives, and Teams Chats A unified interface for cross-tenant migrations of Exchange, OneDrive, and Teams data will enter public preview in early December 2025, streamlining admin workflows. [Introduction] To simplify cross-tenant migrations, we're introducing a unified interface that enables.
MC1181769 Microsoft Purview: Integration with Entra GSA Internet Access to enable sensitive file filtering at the network layer
Microsoft Purview: Integration with Entra GSA Internet Access to enable sensitive file filtering at the network layer Public preview of Purview DLP integration with Entra Global Secure Access enables network-layer inspection and enforc... [Introduction] To help organizations better protect sensitive files in transit, we're introducing a public.

Details

RoadmapIds
518221
Summary
Microsoft Entra introduces cross-tenant security group synchronization, enabling centralized group management and resource sharing across tenants. Public Preview starts late January 2026; general availability begins late April 2026. Admins must opt in, update attribute mappings, and configure cross-tenant access policies to enable this feature.
Platforms
Web

Body (from Message Center)

Updated January 7, 2026: We have updated the content. Thank you for your patience. 

We’re introducing cross-tenant group synchronization, a new capability that enables organizations to synchronize security groups across Microsoft Entra tenants. This feature simplifies collaboration scenarios by allowing shared access to resources across tenants while maintaining centralized group management. It also streamlines administration of multiple tenants by centralizing group membership control, reducing duplication and manual overhead. The new group sync functionality will be part of the Microsoft Entra ID Governance / Microsoft Entra Suite license

This message is associated with Microsoft 365 Roadmap ID 518221.

When this will happen
  • Public Preview: Rollout begins in late January 2026 and completes by late January 2026.
  • General Availability (Worldwide, GCC, GCC High, DoD): Rollout begins in late April 2026 and completes by late April 2026.
How this affects your organization
  • Who is affected: Admins managing Microsoft Entra tenants who want to enable cross-tenant group synchronization.
  • What will happen:
    • No impact unless you opt in during Public Preview.
    • Admins can enable synchronization by updating attribute mappings.
    • Cross-tenant access policies in the target tenant must allow group synchronization.
What you can do to prepare
  • Identify groups that require synchronization into other tenants.
  • Collaborate with admins of other tenants to align on supported scenarios and business processes.
  • Review and update attribute mappings and cross-tenant access policies as needed.

Learn more: Configure cross-tenant synchronization - Microsoft Entra ID | Microsoft Learn

Compliance considerations

No compliance considerations identified. Review as appropriate for your organization.

Raw JSON (for debugging)

Expand/collapse the full payload below.
Show/hide raw
{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": "2026-01-25T00:00:00Z",
    "ai_actions": [
      "Identify groups for synchronization",
      "Coordinate with other tenant admins",
      "Review and update attribute mappings",
      "Update cross-tenant access policies"
    ],
    "ai_master_tags": [
      "Admin",
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Cross-tenant group synchronization in Entra enables syncing security groups across tenants for easier resource sharing and centralized management, available with Entra ID Governance/Suite license.",
    "ai_topics": [
      "Entra"
    ],
    "category": "stayInformed",
    "details_map": {
      "Platforms": "Web",
      "RoadmapIds": "518221",
      "Summary": "Microsoft Entra introduces cross-tenant security group synchronization, enabling centralized group management and resource sharing across tenants. Public Preview starts late January 2026; general availability begins late April 2026. Admins must opt in, update attribute mappings, and configure cross-tenant access policies to enable this feature."
    },
    "id": "MC1198077",
    "importance": 4,
    "is_major_change": false,
    "last_modified": "2026-01-07T22:52:18Z",
    "ms_products": [
      "Entra"
    ],
    "platforms": "Web",
    "roadmap_ids": [
      "518221"
    ],
    "services": [
      "Microsoft Entra"
    ],
    "severity": "normal",
    "tags": [
      "Updated message",
      "New feature",
      "User impact",
      "Admin impact"
    ],
    "title": "(Updated) Microsoft Entra: Cross-tenant security group synchronization"
  }
}