Automation Cloud release notes

Organizations that integrate with Microsoft Entra ID using Delegated access can now allow UiPath to reuse cached user tokens to evaluate group membership in unattended automations and service-to-service (S2S) scenarios. Previously, the Delegated access scope did not support group membership resolution outside interactive sign-in with Microsoft Entra ID, which prevented Microsoft Entra ID directory users from inheriting group-based permissions in these scenarios.

Enable the new Use cached user tokens for group membership checks in unattended automations option from Admin > Security > Authentication Settings > Directory integration and single sign-on (SSO) in your Microsoft Entra ID configuration. New directory connections have the option enabled by default; existing directory connections must opt in.

The availability of this feature depends on the cloud platform that you are using. For details, refer to the Feature availability page, specifically the Use cached user tokens for group membership checks row.

For more information, check Use cached user tokens for group membership checks.

The following new endpoints are now available in the Platform Management API.

Directory API — search and resolve directory entities (users, groups, or applications) within your organization:

Groups API — retrieve the members of a specific local group:

For a full overview of available endpoints, see Directory and Groups.