Woah, this feature totally slipped under my #Entra radar - new protected action capability in #ConditionalAccess for hard-deletion of directory objects. Require e.g. compliant device, phishing-resistant MFA and re-auth before allowing permanent deletion of users, M365 groups and apps in Entra ID!
learn.microsoft.comWhat are protected actions in Microsoft Entra ID? - Microsoft Entra IDLearn about protected actions in Microsoft Entra ID.