Release 10.0.48.54 (August 2026)

1. User role and license optimization

Security and Compliance Studio now includes a User License Optimization workspace. This workspace helps you optimize user role assignments and Microsoft Dynamics 365 license usage based on actual user activity. The feature analyzes user access history from the User Access Logs. It then recommends the minimum set of security roles each user needs to perform their daily tasks, while reducing unnecessary license consumption.

The User License Optimization page provides three key sections:

• Summary: Shows KPI tiles for the total number of active users analyzed, users eligible for a license downgrade, users needing a license upgrade, users whose assigned roles can be reduced, and users whose security configuration is already right-sized.

• User License: Shows all active users. You can filter by license downgrade, license upgrade, role downgrade, or right-sized users. Select a user to see their User Access Logs, the recommended security roles based on historical activity, and the expected license changes after you apply the recommendations.

• Links: Gives quick access to the Audit Log and the User License Optimization batch job configuration.

Based on the analysis results, the application can automatically generate security requests to implement the recommended changes. If existing roles are no longer required, the application creates a single role removal request. If additional roles are needed, it creates a single role assignment request. When both role additions and removals are required, the application generates two separate security requests: one to assign roles and one to remove unnecessary roles.

A dedicated User License Optimization batch job generates the optimization recommendations. Since the analysis doesn’t run in real time, schedule the batch job at a frequency that suits your organization, such as weekly or monthly. You can also run the batch job ad hoc whenever you need an immediate analysis. Running the batch job recalculates the recommended roles and license changes using the latest available user activity data.

1.1 What’s coming next

We are working on additional enhancements to further improve the User License Optimization experience:

• Custom role recommendation: The application will recommend custom security roles or role combinations based on a user’s historical activity. This helps you further optimize security assignments while minimizing license requirements.

• License cost simulator: A new simulator will compare the estimated licensing cost of a user’s current role assignments against the recommended role assignments. This helps you understand the potential cost savings before you implement the recommendations.

These enhancements are under development and will be delivered in a future release.

See also:

• Optimize roles and licenses

• Analyze user role and license assignment

• Optimize user role assignment

• Optimize license assignment

2. Enhanced segregation security set capacity

Security and Compliance Studio now supports significantly larger segregation security sets for Enhanced Segregation of Duties (SoD) rules. This lets you model more complex security scenarios.

Previously, the number of child rules generated for an Enhanced SoD rule was limited by the number of objects you could configure in the associated segregation security sets. Each segregation security set can now contain up to 100 security objects. You can’t configure more than 100 objects in a single security set.

When you use two segregation security sets to create an Enhanced SoD rule, the application generates child rules based on the combination of objects in both sets. As a result, if both security sets contain the maximum of 100 objects, the application can generate and process up to 10,000 child rules for a single Enhanced SoD rule.

This enhancement lets you configure and maintain substantially larger SoD rule definitions, without the previous limitations on child rule generation. It makes it easier to implement comprehensive segregation of duties policies in large and complex security environments.

See also:

• Set up segregation security sets

• Set up segregation of duties rules (enhanced)