Hi All,

Just a quick observation, it looks like last night a pair of Azure Policies were added to the Tenant Root Group of my tenant. I checked a few other tenants, some have them and some don't. Based on the names and descriptions, I assume this is Microsoft preparing for some upcoming changes, and is rolling this out.

Policy 1:

Name : Microsoft Azure Multi Factor Authentication Enforcement for Resource Write Actions

Policy : Multi Factor Authentication Enforcement - Write

Type: SystemHidden

Name: sys.mfa-delete

Created : Oct 20, 2026 (about 15 hours ago)

Non-Compliance Msg : You are receiving this error because you tried to create, update or delete Azure resources without authenticating through MFA. User accounts must be authenticated through MFA to manage your resources.…