Administration & access control

In limited availability, lets admins define up to 10 custom business fields per entity for Action campaigns, journeys and orchestrated campaigns, recorded in dedicated datasets.

MCP Endpoints now support OAuth, letting each person sign in individually from their MCP client so chats and Actions run under their own permissions and credits instead of a shared connection token.

Teams can use the Klaviyo app and Help Center in Japanese to build, send, and find answers without translating.

Catalogs can be assigned to a Team, with Team-level permissions to view, edit, export, or delete them, scoping catalog access without granting it workspace-wide.

Salesforce Go will offer guided discovery and setup of Marketing Planning and Operations, with feature-usage tracking, from one place in Setup; planned from late October 2026.

Now Preview (29 Oct 2026). Current summary: In limited availability, lets admins define up to 10 custom business fields per entity for Action campaigns, journeys and orchestrated campaigns, recorded in dedicated datasets.

Broad OAuth scopes are replaced by precise, granular scopes, with a migration tool for existing apps.

Multi-Account Management can now connect accounts hosted in different regions for mirroring, copying and cross-account workflows.

Admins can now require passkeys as the only allowed login method for their account.

In beta, administrators with MasterSegmentConfig access can delete all Real-Time profiles for a parent segment to reset from an empty state; beta access requires contacting a representative.

The dashboard shows 18 months of monthly resource usage across an organization's Treasure AI accounts, letting owners and admins compare usage by account, track totals against plan allowances, and view daily breakdowns.

SCIM provisioning can sync groups from Okta and Microsoft Entra ID to Braze custom roles, keeping dashboard access aligned with identity provider group membership.

First-time AI credit purchasers get a default spend cap of 50% above monthly credits, with Pay-as-You-Go overage billing from 16 September; admins can set account, feature and action limits.

Admins can set tool-by-tool permissions for each connector used by agents and Breeze Assistant, with one-click write blocking and batch confirmation rules.

Extends Marketing Cloud Next access to users on the Platform Plus license.

Extends Salesforce Go setup: the whole Marketing Cloud configuration, including app install, data streams, prerequisites and Identity Resolution, runs from the Initial Setup page, with filters by channel, Einstein, optimization or analytics.

Account admins can self-manage usage overage notification settings: alert thresholds, recipients, and weekly or monthly report delivery.

A new Settings billing dashboard shows per-account spend breakdowns, historical trends and detailed invoices.

Super Admins can approve apps, control who can install them, and restrict data permissions per app, including AI connectors.

HubSpot now supports configuring multiple identity providers for SSO within a single account, removing the one-IDP limit.

The Sales Data Kit can now be managed independently of other data configuration.

SCIM-compliant API letting IT teams provision, update and deprovision Tealium users directly from their identity provider.

Account admins can set an org-wide custom instruction added to every agent's system prompt in AI Studio, applied automatically to new chats.

The Connected Apps page adds Overview, Insights and Settings tabs plus App Owner Management, warning before deactivating a user who owns an app.

Revamps login so a failed SSO/IdP/account block on one workspace no longer locks users out of all workspaces; lets users choose a workspace before authenticating.

Policy-based permissions now extend to Composable Audience Studio parent segments and folders, letting admins grant full, limited or no access per segment.

Account admins can restrict AI Studio to an approved set of users through the Treasure AI REST API; the restricted mode is enabled on request by the Customer Success Manager.

AI Studio adds a Credit Usage dashboard and a Credit Policy letting administrators monitor and cap per-user daily AI credit consumption.

API keys can be disabled and re-enabled from settings to respond quickly to suspected credential exposure without deleting them.

Customers who purchase SMS through AJO get a usage dashboard with 90 days of MO/MT send metrics, downloadable as CSV.

Brand settings are reorganized into Brand Kit, Brand Voice and a new Brand Knowledge section covering products, competitors and ICP used to personalize AI content.

Breeze Projects can be shared with teammates with view, edit and manage permissions, with pre-configured templates and cross-session project memory.

Workspace time zones let scheduled campaigns and Canvases send using the workspace's own time zone instead of the company-wide time zone; rolling out gradually.

API key expiration policies are now GA, letting admins enforce automatic key rotation with system-wide or per-user expiration lifespans of 1-365 days.

The Tasks app is rebuilt on the CRM framework with table, board and Gantt views, richer filtering, and a customizable Task Pipeline with stages.

Marketers can make content from one business unit available to others as admins manage a growing organization.

Salesforce Go gathers Marketing Cloud Next feature discovery and setup in one place, with an Initial Setup card for foundational tasks and per-channel feature cards with guided steps and progress tracking.

Users can now sign up and log in to Klaviyo with Google credentials instead of a separate password.

Super admins get an in-app toggle controlling whether account data is used for HubSpot's AI model training; Sensitive Data accounts are auto-opted out.

Super admins can restore property values changed in the last 14 days, up to 20 versions per record (45 for contacts), across objects without exports and imports.

Automatically creates or updates a workspace account from the identity provider on a member's first SSO login.

A new Activity Log gives self-serve visibility into actions taken across the account for control and troubleshooting.

Admins can quickly create Marketing Cloud Next users by duplicating existing Engagement users, who are auto-assigned the permissions needed to start using Next.

AI Foundry agents now execute with the permissions of the end user running them rather than the agent's original creator, improving access governance.

Approval Policies can now prevent journey or campaign creators from approving their own objects.