What Changed
The EntraEligibleMembers table entry added to the Microsoft Entra ID Assets Data Connector in v3.3.0 (27-Jun-2026) has been removed in this hotfix bump to v3.3.1. The connector definition (EntraIDAssets_DataConnectorDefinition.json) lost the six-line block that registered EntraEligibleMembers as a selectable stream with a Preview tag.
Security Impact (Visibility & Fidelity)
Environments that installed v3.3.0 and were relying on EntraEligibleMembers ingestion, which surfaces eligible (just-in-time) Entra ID role members via Privileged Identity Management, no longer have that stream declared in the connector. If any detections or hunting queries were written against that table in the brief window between v3.3.0 and v3.3.1 deployment, they will return no results.
The rollback is explicitly a hotfix (follow-up to PR #14568), suggesting the table was not production-ready. No replacement or GA timeline is documented in this PR.
Any queries targeting EntraEligibleMembers should be treated as producing null output until a stable version of this stream is re-introduced.
Affected Files
Solutions/Microsoft Entra ID Assets/Data Connectors/EntraIDAssets_DataConnectorDefinition.json
(packaging artefacts: 3.3.1.zip, ReleaseNotes.md, Solution_MicrosoftEntraAssets.json, mainTemplate.json)