← Back
Using groups to enable Frontier access in the Frontier Admin Control
MC1309739 · build prod-20251231-200323
Category
stayInformed
Severity
normal
Major change
False
Last modified
2026-05-13 23:04:53
Summary source
Azure OpenAI (gpt-4.1)
Action by (Graph)
Action by (AI)
2026-06-01 00:00:00
Services
Microsoft 365 suite
Tags
New feature, Admin impact
Master tags
Admin
Roadmap IDs

One-line summary

Frontier Admin Control now supports Entra ID groups for enrollment, allowing easier management of pilot users with a 10,000-user limit for specific users/groups, rolling out early June 2026.

Similar updates

More like this
MC1184409 Microsoft 365 Copilot: People agent now available in Frontier
Microsoft 365 Copilot: People agent now available in Frontier Microsoft is introducing the People agent in Frontier, an experimental Copilot agent that surfaces organizational insights from Microsoft 365 data, available for preview in November 2025. [Introduction:] We’re introducing the People agent in Frontier —a Copilot agent designed to.
MC1187802 New: Opal Computer Use Agent experience available for Microsoft 365 enterprise users (admin setup required)
New: Opal Computer Use Agent experience available for Microsoft 365 enterprise users (admin setup required) Opal (Frontier), a new Computer Use Agent for Mi... [Introduction] We’re introducing Opal (Frontier) , a new Computer Use Agent experience available under the Frontier program for Microsoft 365 enterprise users. Admin control via Entra.
MC1198077 (Updated) Microsoft Entra: Cross-tenant security group synchronization
(Updated) Microsoft Entra: Cross-tenant security group synchronization Cross-tenant group synchronization in Entra enables syncing security groups across tenants for centralized management; public preview starts January 2026, GA begins late April 2026. Updated April 22, 2026: We have updated the timeline. We’re introducing cross-tenant group.
MC1181201 (Updated) Frontier Admin Control User Assignment Changes
(Updated) Frontier Admin Control User Assignment Changes Starting Nov 13, 2025, admins can no longer assign Frontier access via groups; only individual user assignments will be allowed, with a transition freeze from Nov 6–13. Updated November 12, 2025: We have updated the timeline. [Introduction:] To improve clarity and control over Frontier.
MC1097225 (Updated) Entra ID: Upcoming changes to support passkey profiles in the authentication methods policy (preview)
(Updated) Entra ID: Upcoming changes to support passkey profiles in the authentication methods policy (preview) Entra ID expands passkey policy in November 2025 public preview, enabling group-based passkey controls, new API schema, and broader attestation support for FIDO2/passkey providers. Updated November 5, 2025: We have updated the timeline.
MC1150123 (Updated) Teams Admin Center: Control External Access by Domain for Specific Users and Groups
(Updated) Teams Admin Center: Control External Access by Domain for Specific Users and Groups Teams admins can now assign custom external access policies to users/groups, enabling granular control over which external domains they can interact with; GA rollout starts late Octobe... Introduction We are introducing a new capability in Microsoft.

Details

Summary
Starting June 2026, Frontier Admin Control will support assigning access via Entra ID groups, enabling scalable pilot management with up to 10,000 enrolled users per tenant (except for All Users enrollment). Admins should prepare by creating groups and monitoring membership; no immediate action is required.

Body (from Message Center)

[Introduction]

We’re improving the Frontier Admin Control by adding support for Entra ID groups when managing Frontier enrollment. This update helps administrators scale Frontier pilots more efficiently by aligning enrollment with existing access management practices and reducing the need to manage individual users.

[When this will happen:]

General Availability (Worldwide): Rollout will begin in early June 2026 and is expected to complete by mid-June 2026.

[How this affects your organization:]

Who is affected:

  • Microsoft 365 administrators who manage Frontier access using the Frontier Admin Control.

What will happen:

  • Admins will continue to manage Frontier access from the Frontier Admin Control in the Microsoft 365 admin center.
  • Admins can assign Frontier access using Entra ID groups in addition to individual users.
  • Screenshot: Frontier admin control showing the option to assign access to specific users and groups:

    Frontier admin control.>

  • Group-based enrollment supports managing pilot audiences without enabling Frontier for the entire tenant.
  • A maximum of 10,000 enrolled users applies when using specific users and/or groups.
    • Admins will see a warning if adding a group causes the total enrolled user count to exceed this limit.
    • Admins must remove users or groups until the total enrollment is within the limit.
  • Tenants enrolling All Users are not subject to the 10,000-user limit.
  • There is no change for tenants already enrolling the entire organization.

[What you can do to prepare:]

  • No immediate action is required.
  • If you plan to use group-based enrollment:
    • Create or identify a dedicated Entra ID group for Frontier participants.
    • Add the group to the Frontier Admin Control instead of managing individual users.
    • Review group membership regularly to ensure the total enrolled users remain within the 10,000-user limit (if not using All Users).
  • Update internal admin documentation or pilot guidance, if applicable.

[Compliance considerations:]

This change introduces an admin control that can be managed through Entra ID group membership. No other compliance impacts were identified.

Raw JSON (for debugging)

Expand/collapse the full payload below.
Show/hide raw
{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": "2026-06-01T00:00:00Z",
    "ai_actions": [
      "Plan group-based enrollment if desired",
      "Create or assign Entra ID group(s) for pilot users",
      "Monitor user count to stay within 10,000-user limit",
      "Update admin documentation as needed"
    ],
    "ai_master_tags": [
      "Admin"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Frontier Admin Control now supports Entra ID groups for enrollment, allowing easier management of pilot users with a 10,000-user limit for specific users/groups, rolling out early June 2026.",
    "ai_topics": [
      "Microsoft 365",
      "Entra"
    ],
    "category": "stayInformed",
    "details_map": {
      "Summary": "Starting June 2026, Frontier Admin Control will support assigning access via Entra ID groups, enabling scalable pilot management with up to 10,000 enrolled users per tenant (except for All Users enrollment). Admins should prepare by creating groups and monitoring membership; no immediate action is required."
    },
    "id": "MC1309739",
    "importance": 4,
    "is_major_change": false,
    "last_modified": "2026-05-13T23:04:53Z",
    "ms_products": [
      "Microsoft 365"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Microsoft 365 suite"
    ],
    "severity": "normal",
    "tags": [
      "New feature",
      "Admin impact"
    ],
    "title": "Using groups to enable Frontier access in the Frontier Admin Control"
  }
}