What's New

Cross-tenant workflow execution for MSPs. Run the same onboarding, offboarding, or remediation flow across multiple customer tenants in a single operation.

• Multi-tenant targeting with per-tenant parameter overrides
• Partial-failure handling — succeeded tenants commit, failed tenants roll back
• Consolidated audit record written to the Unified Audit Log of every tenant
• Scoped to delegated admin RBAC — technicians only see tenants they are assigned to

Unified audit search is 3x faster on tenants with more than 10 million events. Large investigations that used to take minutes now return in seconds.

• Rewritten index layer backed by columnar storage
• Query result caching across investigation sessions
• Memory footprint reduced by 55% on long date-range queries

Dry-run mode for every workflow. See exactly what LogFirm would change — which users, which groups, which permissions — before committing a single action.

• Full preview diff against Entra ID, Exchange, SharePoint, and Teams
• Exportable change manifest for change-management approvals
• One-click promote from dry-run to execution with the same parameters

Fixes shipped in this patch release:

• Group-based license assignment now handles nested Entra ID groups correctly
• Scheduled report delivery respects the tenant's configured timezone
• Teams policy assignment no longer silently skips guest accounts
• SSO redirect loop resolved for tenants using custom SAML claims with Entra ID

Exchange mailbox management now supports bulk forwarding rule updates, and the unified audit search includes Intune device compliance events.

• Bulk apply, update, or remove forwarding rules across thousands of mailboxes
• Intune compliance state changes surface alongside Entra ID sign-in events
• Saved searches support parameter substitution and scheduled CSV export

Scenario automations. A visual "when X happens, do Y" builder with 40+ Microsoft 365 triggers and 120+ actions, so repeatable admin work no longer requires PowerShell.

• Triggers for Entra ID sign-in risk, Defender alerts, Purview DLP hits, and new-hire events
• Actions across Exchange, SharePoint, Teams, Intune, and the Graph API
• Conditional branching, retries, and approval gates
• Every execution captured in the Unified Audit Log with step-level detail