Release Notes · July 2026

Live Now: Vacation Manager

It’s time to retire your Conditional Access CA-Travel-Exclude group. Forever.

If you’ve ever managed travelling users with a Conditional Access exclusion group, you know the routine.

The trip gets approved, an email or a ticket comes in, someone gets added to a group, a reminder gets set in a calendar or on a post-it note, and everyone hopes the cleanup happens.

It happens right? Except when it doesn’t…

01 · The problem

The exclusion group era is over

If you’re managing travelling users with a CA exclusion group, you already know that it breaks in predictable ways:

Removal gets forgotten

Users stay excluded from Conditional Access long after the trip ends. A permanent security hole managed by memory.

Nested groups exclude the wrong people

One nested group gets added, and users you never approved are silently pulled outside your CA policies.

Travellers are exposed, not protected

Excluding a user doesn’t secure them abroad, it strips their protection. Without a policy scoped to each trip, they travel uncovered and sometimes stay that way.

Exclusions are audit findings

Every stale exclusion becomes something you have to explain later: in a review, an audit, or a cyber insurance questionnaire.

02 · The fix

Meet Vacation Manager

Vacation Manager runs across your entire client base from the 365sentri dashboard you already use, turning one of the most error-prone manual processes in M365 into a two-minute scheduled task.

Delete the reminders, throw away those post-it notes, close the recurring ticket. The unwind is part of the schedule now.

What’s the best way to get it working properly?

Schedule it before they fly away

Pick the user(s), the dates, the destinations. Everything applies on departure and unwinds on return, automatically. Nothing to remember. Nothing left behind.

Protected abroad, not just excluded

Vacation Manager automatically creates replacement Conditional Access policies targeting the countries they’re travelling to. Your clients’ users stay protected everywhere they go.

Sarah went to Spain YESTERDAY?

No one told you until things stopped working. Backdate the trip and everything applies immediately, exclusion, travel policy, delegation, all live in minutes. And the cleanup is already booked for the day she’s back.

Change plans mid-trip

Extended stay? Extra traveller? Portugal looks like fun? Add or remove users, shift dates, or update countries at any time – Vacation Manager adjusts on the fly, and applies the changes for you!

Clean exclusions, every time

Conditional Access exclusions applied on departure, cleanly removed on return. No stale memberships. No nested group surprises. No permanent gaps.

Delegation included

Temporarily delegate email, calendar, and OneDrive access for the duration of the leave, revoked automatically the day they return.

03 · Get started

One dashboard. Every tenant. Zero forgotten exclusions.

Vacation Manager is officially live today for all customers at no additional cost. Open your 365sentri dashboard and you’ll see Vacation Manager right there at the top of the main menu on the left.

Want to see it on your own tenants? Book a session and we’ll walk you through it.