Defender unified role-based access control
Observed content change
1 new passage (12 words), 1 edited passage (20 words changed). The changed wording mentions permissions, supported platforms. Review the source to confirm the effect.
May need admin actionCheck the roles and permissions you grant; check the platforms and versions you run.
… the enabled workspace.Assigning permissions to a[removed: service principal or to a]GDAP user group in Microsoft Sentinel [added: is supported in unified RBAC. For more information, see Activate Microsoft Defender unified RBAC.Assigning permissions to a service principal] isn't supported in unified RBAC. If you need[removed: either][added: this] capability, keep using Azure RBAC for …
[added: Header 1 Header 2 Cell 1 Cell 2 Cell 3 Cell 4]
Short quotes of Microsoft's changed wording from Microsoft source, © Microsoft Corporation. Read the page for the full text.
Read the current Microsoft source · Link to this observation · Compare any two versions
Sections to inspect
Up to 12 section headings from retained before/after evidence. The current source may have changed again.
Why this was flagged
The changed words, with a few words around them, matched these rule categories: permissions, supported platforms. These matches identify subjects to assess; they do not establish a policy change or applicability.
Observation details · observed 18 Oct 23:50 UTC
- Observed by ChangeIntel
- 18 Oct 23:50 UTC
- Source update metadata
- 15 Oct 22:35 UTC
- First observed on this installation
- 8 Oct 23:13 UTC
- Last successful check
- today 19:13 UTC
- Next check due
- 21 Oct 01:13 UTC
Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.
Watch this page to review its changes in My radar.
Timeline
From the capture of 18 Oct 23:50 UTC- 1 date
- 6 undated sections
- 3 with conditions
- 1 recorded change
- 2 months agomonth windowstarting
- GuidanceMilestone
MC1246006
Requirements, exceptions and scope
Applies to:…
Microsoft Defender provides integrated threat protection, detection, and response across endpoints, email, identities, applications, and data within a single portal. Controlling a user's…
- What's supported by the Microsoft Defender unified RBAC modelRequirementExceptionScope4 conditions4 passages
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
How this timeline changed
Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.
-
Conditions changed Microsoft Sentinelin What's supported by the Microsoft Defender unified RBAC modelseen by ChangeIntel
Observed history and review priority
Captured 18 Oct 23:50 UTC; extracted 18 Oct 23:51 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c.
Review priority. Conditions changed in observed revisions · Extracted assertions require review · Applicability or exceptions require review
0 date changes and 1 condition changes across 1 compared revisions. Suggested check interval: 6 hours.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Retained observations · 3
Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.
- 18 Oct 23:50 UTC · 19 candidates
- 12 Oct 23:53 UTC · 19 candidates
- 8 Oct 23:13 UTC · 19 candidates
Related public evidence
No related evidence found in this installation's recent collection. This does not establish that no announcement exists.
Retained observations
- 18 Oct 23:50 UTC · shown above
- 12 Oct 23:53 UTC
8 removed passages (about 50 words). The changed wording mentions prerequisites. Review the source to confirm the effect.
- 8 Oct 23:13 UTC
Baseline for retained history; no earlier retained text to compare.
What changed
First observed 18 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.