Power Platform - New Continuous Access Evaluation (CAE) rollout nearing completion

As part of our ongoing security improvements for Power Platform, the Continuous Access Evaluation (CAE) rollout for user sign-in flows in Dataverse is now entering its final stage across public cloud environments. This change affects interactive user access to Dataverse and relies on Microsoft Entra Conditional Access policies for near real-time session evaluation. We expect to complete the rollout by the week of August 10, 2026. Once the rollout is complete, we will follow up with a General Availability (GA) announcement confirming that CAE is fully available across the public cloud.

How does this affect me?
Dataverse user access is transitioning to CAE-enabled authentication, where user sessions are continuously evaluated based on Conditional Access policy signals rather than only during initial sign-in.

As part of this rollout, user sign-in traffic to Dataverse may originate from managed locations that must be permitted and compliant with your organization’s CAE Conditional Access policies. We advise that you review your user-focused CAE policies to ensure continued access to Dataverse.

You will be affected by this change if you have:

• CAE-enabled Conditional Access policies applied to users.
• Location-based conditions in user CAE policies.
• Sign-in frequency, session controls, or risk-based policies for Dataverse users.

Note: This change applies only to interactive user sign-in flows.

What do I need to do to prepare?
Please take the following actions for user access scenarios:

1. Review your user-targeted CAE Conditional Access policies.
   1. Ensure these policies allow Dataverse user traffic from locations that are compliant with your CAE policies.
   2. Avoid overly restrictive location conditions that could unintentionally block user sessions.
2. Validate interactive user sign-in scenarios:
   1. Test Dataverse access for end users under current CAE policies.
   2. Review the policies enforcing location, device, or risk conditions.

No action is required if your existing user CAE policies already permit Dataverse access from managed locations.