Default visibility of additional profile card properties in Microsoft 365 profile cards

🚨 The Signal: Microsoft 365 profile cards will now default to displaying 11 previously hidden user properties from Entra ID, such as employee number and UPN. This change surfaces more organizational data by default, reducing admin effort but increasing data visibility.

The Impact

Global and People Administrators are affected, facing increased data exposure risk due to default visibility of sensitive user attributes.

• Global Administrators: Increased data exposure risk from default visibility of sensitive user attributes.
• People Administrators: Requires review of existing data governance policies for profile card properties.
• End Users: More personal and organizational data will be visible on profile cards by default.
• Security Teams: Need to assess and potentially reconfigure data visibility settings to align with privacy and security policies.

The Action

1. Review current Entra ID user attribute population for the 11 affected properties (Division, Role, Employee number, Employee type, Cost center, UPN, Alias, Fax, Street address, State, Postal code).
2. Navigate to the Microsoft 365 admin center > Settings > Org settings > Profile cards to manage property visibility.
3. For specific properties, use PowerShell cmdlets (e.g., Set-OrganizationConfig) to control visibility if not available in GUI.
4. Communicate changes to end-users regarding increased data visibility on profile cards.
5. Update internal data handling and privacy policies to reflect the new default visibility settings.

Domain: Entra · Impact: high · Workload: Entra ID