One thing I couldn’t do through the UI is change the expiration of JWT tokens as issued from ActiveDirectory, I needed to do some Powershell for that. Things in preview often times end up Powershell only first, which I’m OK with.