---
id: change/bcquality/49
type: change
title: "#49 Promote security knowledge from community to Microsoft layer"
summary: Five security knowledge articles moved from the community layer to the Microsoft layer with minor content refinements to remove non-existent references and contribution prompts.
tier: official
language: en
tags:
  - refactor
  - main
system: development
review:
  state: reviewed
  by: opus
  at: "2026-10-08T02:13:04.242Z"
  flags: []
generated:
  at: "2026-10-08T01:26:53.141Z"
  pipeline: 0.2.0
  prompts:
    extract-change: 1
  input_hash: bfda67a95a3787801074310afa8404ce021c7766
evidence:
  - kind: code
    url: https://github.com/microsoft/BCQuality/pull/49
    title: "microsoft/BCQuality#49: Promote security knowledge from community to Microsoft layer"
    date: "2026-07-14"
    commit: bfda67a95a3787801074310afa8404ce021c7766
    t: null
    quote: Pure `git mv` relocation of the SECURITY knowledge domain from the community layer to the Microsoft layer.
links:
  learn: []
  objects: []
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
  changes: []
number: 49
repo: microsoft/BCQuality
source_id: bcquality-prs
url: https://github.com/microsoft/BCQuality/pull/49
kind: pr
base_branch: main
major: null
merged_at: "2026-07-14T09:23:57Z"
author: JesperSchulz
author_type: User
community_contribution: false
labels: []
change_class: code
change_kind: refactor
behavior_change: false
breaking: false
files:
  count: 13
  additions: 1
  deletions: 12
  al: 13
apps: []
objects_touched: []
objects_unjoined:
  - path: microsoft/knowledge/security/classify-every-field-with-dataclassification.bad.al
    status: renamed
    reason: not-in-snapshot
  - path: microsoft/knowledge/security/classify-every-field-with-dataclassification.good.al
    status: renamed
    reason: not-in-snapshot
  - path: microsoft/knowledge/security/classify-every-field-with-dataclassification.md
    status: renamed
    reason: not-in-snapshot
  - path: microsoft/knowledge/security/compose-permission-sets-with-included-sets.bad.al
    status: renamed
    reason: not-in-snapshot
  - path: microsoft/knowledge/security/compose-permission-sets-with-included-sets.good.al
    status: renamed
    reason: not-in-snapshot
  - path: microsoft/knowledge/security/compose-permission-sets-with-included-sets.md
    status: renamed
    reason: not-in-snapshot
  - path: microsoft/knowledge/security/do-not-grant-rights-beyond-a-users-entitlement.md
    status: renamed
    reason: not-in-snapshot
  - path: microsoft/knowledge/security/prefer-oauth2-over-api-keys-for-external-http-calls.bad.al
    status: renamed
    reason: not-in-snapshot
  - path: microsoft/knowledge/security/prefer-oauth2-over-api-keys-for-external-http-calls.good.al
    status: renamed
    reason: not-in-snapshot
  - path: microsoft/knowledge/security/prefer-oauth2-over-api-keys-for-external-http-calls.md
    status: renamed
    reason: not-in-snapshot
  - path: microsoft/knowledge/security/protect-sensitive-data-in-temporary-tables.bad.al
    status: renamed
    reason: not-in-snapshot
  - path: microsoft/knowledge/security/protect-sensitive-data-in-temporary-tables.good.al
    status: renamed
    reason: not-in-snapshot
  - path: microsoft/knowledge/security/protect-sensitive-data-in-temporary-tables.md
    status: renamed
    reason: not-in-snapshot
obsoletions: []
backports: []
fixes_issues: []
work_items: []
systems:
  - development
quote: Pure `git mv` relocation of the SECURITY knowledge domain from the community layer to the Microsoft layer.
joined_against:
  major: null
  commit: null
---

# #49 Promote security knowledge from community to Microsoft layer

> Five security knowledge articles moved from the community layer to the Microsoft layer with minor content refinements to remove non-existent references and contribution prompts.

[Pull request](https://github.com/microsoft/BCQuality/pull/49) · merged into `main` on 2026-07-14 by JesperSchulz · 13 files (+1 -12), 13 AL · refactor · tier official · reviewed (checked by Opus)

## What changed

- Security domain knowledge relocated from community to Microsoft layer through byte-for-byte file moves
- Removed references to missing example files and removed contribution boilerplate text
- Best practice guidance improved for temporary table data protection to clarify automatic cleanup behavior
- One article kept in community layer pending domain review
- No changes to article count or frontmatter configuration

## AL objects touched

- `microsoft/knowledge/security/classify-every-field-with-dataclassification.bad.al`: renamed, not in the BC? snapshot
- `microsoft/knowledge/security/classify-every-field-with-dataclassification.good.al`: renamed, not in the BC? snapshot
- `microsoft/knowledge/security/classify-every-field-with-dataclassification.md`: renamed, not in the BC? snapshot
- `microsoft/knowledge/security/compose-permission-sets-with-included-sets.bad.al`: renamed, not in the BC? snapshot
- `microsoft/knowledge/security/compose-permission-sets-with-included-sets.good.al`: renamed, not in the BC? snapshot
- `microsoft/knowledge/security/compose-permission-sets-with-included-sets.md`: renamed, not in the BC? snapshot
- `microsoft/knowledge/security/do-not-grant-rights-beyond-a-users-entitlement.md`: renamed, not in the BC? snapshot
- `microsoft/knowledge/security/prefer-oauth2-over-api-keys-for-external-http-calls.bad.al`: renamed, not in the BC? snapshot
- `microsoft/knowledge/security/prefer-oauth2-over-api-keys-for-external-http-calls.good.al`: renamed, not in the BC? snapshot
- `microsoft/knowledge/security/prefer-oauth2-over-api-keys-for-external-http-calls.md`: renamed, not in the BC? snapshot
- `microsoft/knowledge/security/protect-sensitive-data-in-temporary-tables.bad.al`: renamed, not in the BC? snapshot
- `microsoft/knowledge/security/protect-sensitive-data-in-temporary-tables.good.al`: renamed, not in the BC? snapshot
- `microsoft/knowledge/security/protect-sensitive-data-in-temporary-tables.md`: renamed, not in the BC? snapshot

## Context

- Systems: development
- From the description: "Pure `git mv` relocation of the SECURITY knowledge domain from the community layer to the Microsoft layer."

Source: metadata of a merged pull request in microsoft/BCQuality (bcquality): title, labels, changed paths and counts, with a summary in our words. No source text and no description beyond one short quote (D10, D61).
