October 6, 2026 SaaS Alerts release notes

Ask AI - MSFT Agent

Enhancements

License cost estimates

You can now ask the assistant for the estimated monthly cost of unused or idle licenses. Estimates are based on Microsoft's published U.S. list prices for annual subscriptions, and the assistant includes the date the pricing was last verified. If pricing information is not publicly available for a license, the assistant identifies the license instead of estimating a cost.

Investigations now identify Defender for Endpoint allow entries

The assistant now checks Microsoft Defender for Endpoint indicators during compromise, malware, and related security investigations. If an allow entry is found, investigation reports include details such as the associated file hash, certificate, or address, along with information about who created the entry and when.

Fixes

Change approvals complete reliably

In some cases, approving a later change in a conversation could incorrectly return a message indicating there was nothing pending to approve, preventing the change from being applied. Approved changes are now processed more reliably.

Improved accuracy for user lists

When listing users, totals could occasionally differ from the users shown, and some email addresses or user principal names could be displayed incorrectly. User details are now copied more accurately, and inconsistencies between totals and displayed results have been reduced.

Clearer reporting for dismissed Secure Score recommendations

Dismissed Secure Score recommendations could previously appear as implemented when their associated settings were configured. The assistant now clearly identifies dismissed recommendations, provides the dismissal reason, and separately reports any configured settings.

Resume interrupted multi-step changes

If a multi-step change was interrupted before completion, resuming it could fail and prevent the remaining steps from running. The assistant now presents approval for only the remaining steps and continues the change from where it stopped without rerunning completed steps.