MC1143992 - Microsoft 365 Apps admin center: Cloud Update feature now generally available

Introduction

Cloud Update is now generally available in the Microsoft 365 Apps admin center (config.office.com), bringing modern, cloud-based controls to help you keep Microsoft 365 Apps current, secure, and Copilot-ready with less effort.

With Cloud Update, you can assign custom rollout waves, set exclusion windows for business-critical freeze periods, pause deployments, and roll back if neededâ€”all from a single, lightweight experience.

When this will happen

General Availability (Worldwide): The rollout began in early August 2025 and is now complete.

How this affects your organization

If you participated in the preview: You will see the same experience, now without â€œPreviewâ€ labels.
If you are new to Cloud Update: You can now simplify monthly update management for Microsoft 365 Apps using automation.

Key benefits:

Simpler, safer monthly updating: Automate servicing while retaining control with pause, rollback, exclusion windows, and custom rollout waves.
Copilot readiness: Keeping devices on a supported monthly channel and managed by Cloud Update helps ensure readiness for Microsoft 365 Copilot experiences.
Centralized management: Enable and manage Cloud Update in the Microsoft 365 Apps admin center (config.office.com).

Screenshot 1 - Cloud Update dashboard shows overall progress and profile status:

Screenshot 2 - Monthly Enterprise profile dashboard shows wave rollout progress and management controls:

This feature is off by default and must be enabled by an admin.

What you can do to prepare

Before enabling Cloud Update, review the following prerequisites:

Supported admin roles:

Office Apps Administrator (recommended)
Security Administrator
Global Administrator

Note: Global Reader is supported in the admin center but cannot manage Cloud Update.

Supported subscription plans:

Education: Microsoft 365 A3, A5
Business: Microsoft 365 Business Standard, Business Premium
Enterprise: Office 365 E3, E5; Microsoft 365 E3, E5

Note: GCC, GCC High, DoD, and Microsoft 365 operated by 21Vianet are not supported.

Supported environments and versions:

Devices must run supported versions of Microsoft 365 Apps on Windows 10/11 or supported Windows Server editions.
Devices must have access to required endpoints (such as *.office.com, *.config.office.com).

Microsoft Entra group requirements:

Groups can include both user and device objects.
Devices must be Microsoft Entra joined or hybrid joined.
Nested groups are supported.
Groups should contain no more than 20,000 objects.

Update controls available:

Pause: Temporarily stop update deployments (Monthly Enterprise Channel only).
Rollback: Revert devices to one of the two previous monthly builds (Monthly Enterprise Channel only).
Exclusion windows: Prevent updates during critical business periods.
Exclude groups: Exclude specific devices or users from Cloud Update management.
Rollout waves: Configure phased deployments across groups.
Update deadlines: Enforce update installation within a defined time window.

No admin action is required before the rollout, but enabling and configuring Cloud Update is necessary to begin using it.

Enable and configure Cloud Update in the Microsoft 365 Apps admin center to begin using the feature.

Learn more:

Compliance considerations

Does the change introduce or significantly modify AI/ML or agent capabilities that interact with or provide access to customer data?	Yes. Cloud Update supports Copilot readiness by ensuring devices are on supported channels, which may involve telemetry and update coordination across user devices.
Does the change alter how admins can monitor, report on, or demonstrate compliance activities?	Yes. Cloud Update provides centralized controls and visibility into update status, which can support compliance reporting and lifecycle management.
Does the change include an admin control and, can it be controlled through Entra ID group membership?	Yes. Cloud Update must be enabled by an admin and can be managed by roles such as Office Apps Administrator, Security Administrator, or Global Administrator.