Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/271 feeds/APIs · 461/464 docs · 8/9 advisories · checked 00:50 UTC Customize Public modeDiscuss ChangeIntel on Discord

Defender unified role-based access control

Timelines and exceptions · All guidance changes

Defender · Official Microsoft guidanceObserved changes retained

Retained observation

Source metadata changed; retained article content is unchanged.

Documentation metadata only

Read the current Microsoft source · Link to this observation · Compare any two versions

Observation details · observed 23 Oct 08:48 UTC
Observed by ChangeIntel
23 Oct 08:48 UTC
Source update metadata
15 Oct 22:35 UTC
First observed on this installation
8 Oct 23:13 UTC
Last successful check
25 Oct 21:39 UTC
Next check due
today 03:39 UTC

Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.

Watch this page to review its changes in My radar.

Timeline

From the capture of 23 Oct 08:48 UTC
  1. 2 months agomonth windowstarting

Requirements, exceptions and scope

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

  1. Conditions changed Microsoft Sentinelin What's supported by the Microsoft Defender unified RBAC modelseen by ChangeIntel
Observed history and review priority

Captured 23 Oct 08:48 UTC; extracted 23 Oct 08:48 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.

Review priority. Conditions changed in observed revisions · Extracted assertions require review · Applicability or exceptions require review

0 date changes and 1 condition changes across 2 compared revisions. Suggested check interval: 6 hours.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 4

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

Retained observations

  • 23 Oct 08:48 UTC · shown above
  • 18 Oct 23:50 UTC

    1 new passage (12 words), 1 edited passage (20 words changed). The changed wording mentions permissions, supported platforms. Review the source to confirm the effect.

  • 12 Oct 23:53 UTC

    The page title or its body outside the tracked passages changed. Review the source for its effect.

  • 8 Oct 23:13 UTC

    Baseline for retained history; no earlier retained text to compare.

What changed

First observed 18 Oct 2026

No field changes are shown for this selection.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 26 Oct 00:50 UTC · 271 of 271 readable · 269 fully read · documentation 461/464 current