Alert Plus Introduces Stronger Microsoft 365 Authentication and Expanded Administration Tools
The latest Alert Plus release is now available, delivering important security enhancements, improved certificate and permission management, and a more streamlined administrative experience.
This release includes:
- Alert Me v1.26.8.28
- Alert Admin v1.26.8.28
- Bamboo Tenant Manager v1.26.9.8
- Alert Plus backend v1.26.9.11
Stronger Microsoft 365 Authentication
Alert Plus can now authenticate requests using the signed-in user’s Microsoft 365 identity instead of relying solely on a shared service key. Each request is restricted to the customer’s own tenant, providing stronger identity protection and better tenant isolation. The release also introduces the foundation for Microsoft Entra role-based access control. As this capability is enabled, organizations will be able to assign Alert Plus roles to individual users or groups to control who can view, create, manage and administer alerts. Existing alerts will continue to run while customers complete the new authentication setup.
Improved Certificate and Permission Management
Bamboo Tenant Manager now provides significantly better visibility and control over the application registrations used by Alert Plus.
Administrators can now:
- Generate, download and rotate the certificate Alert Plus uses to access SharePoint.
- See which certificate is assigned to each app registration.
- View certificate thumbprints and expiration dates.
- Receive warnings when certificates are approaching expiration.
- Check whether each app registration has the required Microsoft Graph and SharePoint permissions.
- Identify permissions that are missing or awaiting administrator consent.
- Assign a dedicated certificate to an app registration or use the shared tenant certificate.
These improvements make it easier to maintain a healthy Alert Plus environment and resolve configuration issues before they interrupt alert delivery.
More Flexibility for Customer-Hosted Environments
Customers running the Alert Plus backend in their own Microsoft Azure subscription can now configure Alert Plus to use their own Microsoft Entra app registration without rebuilding or redeploying the SharePoint packages.
The release also expands authentication support for Microsoft GCC High and Department of Defense tenants.
A Better Bamboo Tenant Manager Experience
Bamboo Tenant Manager includes several interface and usability improvements:
- A new authentication status card displays the tenant’s current rollout stage.
- Queue and function-app names are now entered as individual tags.
- Alert Plus settings have been reorganized for easier navigation.
- Alert Service Support now includes a dedicated Diagnose option.
- The App Registration Pool is easier to use on smaller screens.
- Notifications and confirmation dialogs now follow Microsoft Fluent UI standards.
- Dark-theme rendering has been improved.
- Several layout, navigation and configuration-screen issues have been corrected.
Additional Reliability Improvements
The release also resolves several issues reported by customers, including:
- Intermittent SharePoint connection failures in tenants using multiple app registrations.
- Delivery failures involving unusually large alert emails.
- Loading issues in GCC High and tenants whose SharePoint addresses do not end in sharepoint.com.
- Configuration entries being ignored when they specify an app registration without a custom backend address.
- Alert Plus configuration problems in tenants that have not previously been registered.
Alert owners can also now access the run history for their own alerts, making it easier to confirm execution and investigate delivery questions without requiring administrator assistance.
Administrator Action Required
After upgrading Bamboo Tenant Manager, a SharePoint administrator should approve the new Alert Plus API requests under:
SharePoint Admin Center → Advanced → API access
The required requests are:
- Microsoft Graph – Sites.Read.All
- AlertPlus.Read
- AlertPlus.ReadWrite
A Microsoft Entra administrator must also grant tenant-wide administrator consent for the Alert Plus application.
Existing alerts will continue to operate while these approvals are completed. Customers should coordinate certificate replacement carefully, because alert processing may be temporarily interrupted until the new certificate has been uploaded to every applicable Microsoft Entra app registration.
This release represents another major step in the evolution of Alert Plus, providing stronger Microsoft 365 security, better administrative visibility and greater deployment flexibility for organizations replacing SharePoint’s retired native alert functionality.
|