Defender unified RBAC permissions
No content change seen yet. Watched since today 08:30 UTC, last read today 08:30 UTC, next check 24 Oct 08:30 UTC.
Read the Microsoft source · Link to this observation · My radar
Timeline
From the capture of today 08:30 UTC- 6 undated sections
- 3 with conditions
Requirements, exceptions and scope
Unless otherwise stated, all permissions are applicable to all supported workloads and will be applied to the data scope selected during the data source and…
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
Observed history and review priority
Captured today 08:30 UTC; extracted today 08:31 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.
Review priority. Extracted assertions require review · Applicability or exceptions require review
0 date changes and 0 condition changes across 0 compared revisions. Suggested check interval: 24 hours.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Related public evidence
- Public source · 25 Aug 2026MC1461704: Microsoft Defender XDR: Unified response actions across identity accountsShared reference: https://learn.microsoft.com/en-us/defender-xdr/custom-permissions-details
What changed
First observed 23 Oct 2026No field changes are shown for this selection.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.