Microsoft is ending the memberOf rule operator for dynamic groups, dynamic administrative units, and entitlement management auto-assignment policies. After November 3, 2026, affected objects stop updating and freeze in their last known state. Here's what's changing, the timeline, the impact, and how to audit your tenant.