Release notes — August 2026
Product updates released in August 2026.
Microsoft 365
Limit directory synchronization to one Entra security group
During Microsoft onboarding, an organization owner can now choose between importing the entire directory and importing one security-enabled Microsoft Entra group. Group scope imports only that group's metadata and its eligible direct members. Nested-group members, guests, disabled accounts, and users without either an email address or user principal name are excluded.
Elba reconciles group membership on a schedule, with directory changes reflected within 24 hours when synchronization completes successfully. If a user leaves the selected group, Elba removes and unenrolls that user after the next completed synchronization. If the group becomes unavailable or no longer contains the organization owner as an eligible direct member, Elba aborts stale-user cleanup. Existing synchronized users are not removed, and the import never expands to the full directory.
Import scope and Microsoft permissions are different
The group selection limits the directory data Elba queries and stores. Microsoft application permissions remain tenant-wide.
See Connect Microsoft 365 for prerequisites and setup instructions.