Governed Execution
Preflight, dry-run, rollback, and final apply controls.
Data as of May 12, 2025, 10:30 AM
Execution is disabled by default
No Microsoft 365 license mutation can occur unless every readiness, approval, confirmation, and preflight gate passes.
Safe execution workflow
1
Run preflight
Validate direct-user assignment source, protection policies, approvals, and Graph readiness.
2
Run dry run
Generate sanitized operation previews without changing the customer tenant.
3
Export rollback package
Download the governed restore package before any approved apply.
Final apply confirmation
Type: APPLY APPROVED LICENSE CHANGESENABLE_LICENSE_EXECUTION is false. Set it to true and redeploy before real apply.