How to assign Custom Security Attributes in EntraID?

Question

How to assign Custom Security Attributes in EntraID?

Elia Dal Santo 25

Hello

I'm trying out the new Custom Security Attributes feature in Microsoft Entra ID, but I got stuck trying to assign the attributes to users.

In particular, I'm following the guide here:

https://learn.microsoft.com/en-us/entra/identity/users/users-custom-security-attributes

but I got stuck at the step that says "5. In the Manage section, select Custom security attributes.".

The problem is that when I select an User, I do not have the "Custom Security Attributes" entry in the user menu, as you can see from this screenshot:

User's image

I seem to have all the requirements listed in the documentation:

I have both the Attribute Assignment Administrator and Attribute Definition Administrator roles (plus I'm a global admin)
I have already defined a set of attributes
I checked if there were licensing issues, but the documentation here explicitly says that Custom Security Attribtues are "Available in all editions of Microsoft Entra ID" (I have a Microsoft 365 Business Standard license by the way)

So why can I not see the menu to assign attributes? What am I missing here? Can anybody help?

JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator

2024-01-30T20:23:38.1466667+00:00

@Elia Dal Santo
I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.
Elia Dal Santo 25 Reputation points

2024-01-31T08:33:53.42+00:00

Hello James, Since it seems there's no ETA or way to publicly track this issue, I guess I don't have any other questions. Thanks for your support, have a nice day.

Accepted answer

1 additional answer

Your answer

JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator

2024-01-30T20:23:38.1466667+00:00

@Elia Dal Santo
I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.
Elia Dal Santo 25 Reputation points

2024-01-31T08:33:53.42+00:00

Hello James, Since it seems there's no ETA or way to publicly track this issue, I guess I don't have any other questions. Thanks for your support, have a nice day.

Answer 1

Thank you all for reporting this, and Vasil in particular for getting it to the right people! The UI fix has been completed and is process of rolling out to all tenants currently. That could take up to a week or so, so please be on the lookout for it to reflect on your own tenants. The background is that when this capability was in preview, the original thinking was that it might require a premium license. So, the UI license checks were in place to ensure a premium license. But based on feedback and further thinking, we dropped the premium license requirement when we released this to GA, and we missed one place in the UI to remove the license check. That has now been fixed, so it remains in the free tier, like the documentation says. Appreciate the patience and helping us address this!

Elia Dal Santo 25 Reputation points

2024-02-16T09:01:02.89+00:00

I can confirm it is fixed! Thanks for your support.

Answer 2

Vasil Michev 119.8K MVP Volunteer Moderator

Unfortunately, the documentation seems to be wrong on this one, as per our recent testing in this thread. Assigning Custom security attributes to users is not (currently) available for the "Free" edition of Azure AD. Whether this is a bug or working as expected, I cannot confirm, but the end result is that you need premium licenses to use this functionality.

Elia Dal Santo 25 Reputation points

2024-01-25T08:37:51.5633333+00:00

How can we find out if this is a bug or intended behavior? Quite dishonest if it's the latter I must say, especially since you can define attributes without problems, but then you can't assign them...
Vasil Michev 119.8K Reputation points MVP Volunteer Moderator

2024-01-25T08:55:58.4+00:00

I pinged some folks on MS side, they confirmed this is not the intended behavior. Now whether this get fixed and when, I cannot tell. If I get any additional info, I will update the thread.
Elia Dal Santo 25 Reputation points

2024-01-25T09:21:19.4933333+00:00

Thank you very much, I'll monitor the thread for any updates.
Vasil Michev 119.8K Reputation points MVP Volunteer Moderator

2024-01-27T15:17:08.01+00:00

So, it has been officially confirmed as a bug in the UI, and a fix will be pushed at some point. No ETAs though, so it might take some time.
Still, a good news, as there will be no requirement for Premium licensing!
Elia Dal Santo 25 Reputation points

2024-01-29T14:58:14.4933333+00:00

Thanks for the confirmation. Is there a ticket/issue tracker somewhere that the public can follow? Or do we just have to wait for news?
Vasil Michev 119.8K Reputation points MVP Volunteer Moderator

2024-01-29T16:13:27.6333333+00:00

I'm afraid it's the latter.

Share via

How to assign Custom Security Attributes in EntraID?

1 additional answer

Your answer