CoreView Release Notes

[COREVIEW APP] Per-user MFA property deprecation: the “Per-user MFA” property has been deprecated. The following capabilities are no longer available:

• The “Per-user MFA status” field in reports and User Cards
• The “Manage MFA” management action and workflow action
• The “Users without MFA” and “Admins without MFA” Playbook policies

Automation based on this property no longer works. This includes workflows, custom actions, and custom Playbooks.

[COREVIEW APP] Conditional Access IP update required: thanks to recent infrastructure optimizations, including the removal of some Windows Machines now that PowerShell 7 is mature enough to handle M365 Modules, we have reduced the number of IPs required by our platform.

Please review the updated IP list and remove any outdated IPs from your Conditional Access policies:

• Guide on how to update the IPs in your Conditional Access policies

[COREVIEW APP] Per-user MFA property deprecation: the “Per-user MFA” property will be deprecated on 26 May 2026. Starting on this date, the following capabilities will no longer be available:

• The “Per-user MFA status” field in reports
• The “Per-user MFA status” field in User Cards
• The “Manage MFA” management and workflow action
• The Playbook policies “Users without MFA” and “Admins without MFA”

Automation that depends on this property will also stop working. This includes workflows, custom actions, and custom Playbooks.

Related Articles

• CoreView Release Notes March 2026
• Configuration Manager Release Notes September 2025
• Release 22.04 Key Features

Table of Contents

• May 26 enhancements
• ANNOUNCEMENTS
• May 12 enhancements
• ANNOUNCEMENT

IN THE SPOTLIGHT

Your browser does not support HTML5 video.

[COREY REPORTING] Report merging by User Principal Name: Corey can now merge data from two separate reports when a question requires information from both sources.
When a merge is required, Corey identifies the relevant reports, matches records by User Principal Name, and returns:

• A preview of the merged table.
• The complete merged report as a downloadable Excel file.

Report merging is supported for two reports at a time. Both reports must include the User Principal Name attribute.

[SETTINGS] Organization-level password criteria: Tenant Admins can now use the new “Password criteria” tab in Settings > Organization Settings to set organization-level password length.
Passwords must meet the configured length and include at least 3 of 4 character groups: uppercase, lowercase, digit, and special character.
To support validation before submission, password fields display a live checklist that updates as each requirement is met.
The organization-level criteria apply to management actions and newly created workflows. Existing workflows retain their current criteria, while “Set criteria” remains available within workflows for specific overrides. …

[COREVIEW CONTROL FOR SHAREPOINT] SharePoint recycle bin files report: a new “SharePoint files in recycle bin” report lists deleted SharePoint files currently in the recycle bin.
It includes item details, storage usage, versions, deletion details, and recycle bin stage.

This feature is only available with the CoreView Control for SharePoint add-on. 

[COREVIEW LOG IN] Login page visual updated: the CoreView login page has been redesigned. The login button has also been updated to align with the new page layout.

[COREVIEW APP] Tech Pills available in app and CoreUniversity: short technical video guides are now available in the CoreView app and in CoreUniversity. 

Users can open Tech Pills from the “Learn more” button in the top-right corner of supported pages. The videos cover Reports, Playbooks, Management Actions, Workflows, User Templates, Operators, and Permissions.

Content is role-based. Operators see videos relevant to operator tasks, while Tenant Admins see videos focused on Tenant Admin activities. …

IN THE SPOTLIGHT

[PLAYBOOKS] New policies for permanent active role assignments and email-exposed admins: two new out-of-the-box policies are now available in Governance Center > Security & Identity: “Permanent Active Role Assignments” and “Permanent Active Admins Using Email”.
The first policy identifies users with permanent active role assignments and flags them for review. The second identifies users with a permanent active admin assignment who have used email in the last 90 days. These accounts may present higher phishing exposure because they combine persistent privileged access with active email usage.
For both policies, the related report can be scheduled as a remediation action.

OTHER IMPROVEMENTS

[COREVIEW CONTROL FOR SHAREPOINT] Warning for long-running filters on large SharePoint datasets: when filtering string columns across large datasets in the “Items with Unique Permissions” and “SharePoint Item Level” reports, a warning is displayed if the filter takes more than 10 seconds to run.
The warning recommends narrowing the dataset first by filtering by “Site ID”. …

[REPORTS] Invitation State and Sponsor attributes added to guest user reports: two Entra ID attributes — Invitation State and Sponsor — are now available in the Active Users report and other guest-based reports, including Guest Users and Inactive Guest Users. 

Tenant Admins can use these columns to monitor whether a guest invitation is pending or accepted and to identify who is responsible for each guest account.

This enhancement was inspired by a CoreVoice idea.

[WORKFLOWS] Audit logging for workflow and template creation: 
CoreView now generates audit log entries when workflow governance assets are created. Tenant Admins and authorized auditors can trace who created an asset, when it was created, and from which source Workflow.
Audit log entries are generated for the following events:

• Creation of a draft Workflow, capturing the user, timestamp, and relevant identifying details.
• Creation of a Workflow template from a draft workflow, recording the originating draft as the source. …

IN THE SPOTLIGHT

[COREVIEW CONTROL FOR SHAREPOINT] CoreView Control for SharePoint now available: CoreView Control for SharePoint provides visibility into SharePoint Online sites, items, permissions, sharing exposure, storage usage, and version growth.
The feature includes progressive item-level import, dashboards for sharing and storage analysis, reports for site- and item-level investigation, and out-of-the-box Playbook policies for sharing, permissions, and storage governance. 

The CoreView Control for SharePoint feature is available as an add-on. 

[COREY] Official knowledge sources used for unsupported requests: when Corey cannot execute a requested action natively, it can now reference official knowledge sources in its response. The sources are the Knowledge Center and CoreUniversity.
Responses may include step-by-step guidance, documentation links, course references, and SKU-specific information.

OTHER IMPROVEMENTS

…

IN THE SPOTLIGHT

[ACCESS REVIEW] PIM reviews for Microsoft Entra role assignments: Access Review now support Microsoft Entra Privileged Identity Management (PIM) admin role assignments, including both eligible and permanent assignments, after the required Microsoft consent and configuration are completed.
Assigned reviewers can review active and expired PIM assignments. Based on the assignment type, reviewers can remove, extend, or renew the assignment.

The Access Review feature is available as an add-on. 

OTHER IMPROVEMENTS

[REPORTS] Last sign-in and logon date columns in Exchange Email Activity: the “Exchange email activity” report now includes two selectable columns: “Last interactive sign-in (UTC)” and “AD last logon date”. These columns help correlate mailbox activity with user sign-in and logon history.
This enhancement was inspired by a customer request.

…

[SETTINGS] Service account management modes in Admin Read Only: in “Organization Settings > Admin read only”, service account management is now split into “Manual” and “Automatic” modes through a dedicated toggle. “Manual” mode lets Tenant Admins update service account usernames and passwords. “Automatic” mode lets Tenant Admins create or recreate service accounts. The selected mode can be changed at any time after onboarding.

[COREY REPORTING] Tenant configuration alignment reporting: Corey can now return tenant configuration alignment data against the CIS baseline. It reports configuration status, baseline values, current values, deviations, and related compliance context. 

[COREY ACTIONS] Remove mailbox forwarding: Tenant Admins can now remove both internal and external mailbox forwarding from one or more email addresses by chatting with Corey.

…

[COREY ACTIONS] Convert user mailbox to shared mailbox: Corey can now convert an eligible user mailbox to a shared mailbox through chat. It validates the mailbox and asks for confirmation before running the action. 

[COREY ACTIONS] Revoke user sessions: Corey can now revoke active user sessions through chat in both CoreView and Microsoft 365. After confirmation, Corey executes the action directly.

[COREY REPORTING] In-chat result limit increased to 25: Corey reporting previews shown in chat now return up to 25 results. This change supports quicker investigations without leaving the conversation.
This enhancement was inspired by a CoreView customer.

…

**[**COREY ACTIONS] Remove user from Microsoft 365 group: Corey can now remove a user from a Microsoft 365 group within a single session. This completes the full group member removal flow without requiring the operator to switch context.

**[**COREY REPORTING] Guest user queries now support active and inactive user details: Corey can now query both active and inactive guest users. Supported results include properties such as creation date, inactivity, department, license assignment, and admin role presence, and more.

**[**COREY UI] Stop button for response generation: a “Stop” button is now available in the “Ask Corey” chat box while Corey is generating a response. Clicking the button interrupts the current response and returns the chat box to its idle state.

…

IN THE SPOTLIGHT

**[**COREY ACTIONS] Corey can execute license management actions: Corey can now complete the full license-management flow within a single session. Supported actions include:

• Setting or updating a user’s usage location
• Selecting a License Template
• Validating the target License Pool before applying changes
• Assigning or unassigning individual licenses
• Assigning or unassigning service plans within a license
• Removing licenses (previously available).

OTHER IMPROVEMENTS

[COREY REPORTING] Additional license reporting sources available in Corey: Corey can now retrieve data from these license reporting areas:

• License Pool Center: License Costs
• License Pool Center: Licenses by Tenant
• Optimization Center: Licenses
• Optimization Center: Duplicated Plans

This update expands Corey's license reporting coverage, adding visibility into license costs, tenant-level license distribution, and duplicated plan data.

…