(Updated) Microsoft Purview compliance portal: Admin assignment time limit
Versions captured by this deployment. Earlier versions and notices may be missing; first observed is not first published.
Rollout
- Ends
- 30 Oct 2026
Rollout dates are often only in the text. When Microsoft moves them, the change shows under "What changed".
- Microsoft's start date
- 1 Jul 2026
- Last changed by Microsoft
- 2 Jul 2026
- First seen here
- 19 Oct 2026
- Versions seen
- 1
What the notice says
Microsoft's text, with its sections, lists and tables; source markup removedUpdated July 2, 2026: We have updated the content and timeline. Thank you for your patience.
What and Why
Microsoft Purview is introducing the ability to assign a time limit when adding users or security groups to role groups. Administrators can specify an expiration date from 1 day up to 2 years, enabling temporary administrative access and supporting least-privilege security practices. This enhancement helps organizations improve governance and compliance while reducing the risk of unnecessary long-term privileged access.
Rollout Schedule
- General Availability (Worldwide): Beginning late July 2026; expected to complete by late August 2026
- General Availability (GCC, GCC High, DoD): Beginning late August 2026; expected to complete by late September 2026
Impact on Your Organization
Who is affected
- Microsoft Purview administrators
- Security and compliance administrators
- Organizations using Purview role groups in Worldwide, GCC, GCC High, and DoD environments
Platforms/Services
- Microsoft Purview compliance portal
- Microsoft Defender portal
- Microsoft Purview RBAC
What will happen
- Administrators can assign users or security groups to role groups with a defined expiration period.
- Assignment durations can range from 1 day to 2 years.
- The capability applies to existing and new assignments.
- Existing assignments are not modified automatically.
- No impact to user workflows.
- The feature is available by default after rollout.
- No policy or configuration changes are required.
Action Required/Recommendations
No action is required.
We recommend that you:
- Review privileged access management processes.
- Consider using assignment expiration periods for temporary access scenarios.
- Update internal documentation where appropriate.
- Inform Purview administrators of the new capability.
Compliance Considerations
| Compliance Consideration | Assessment |
|---|---|
| Does the change alter how admins can monitor, report on, or demonstrate compliance activities? | Temporary role group assignment limits may support governance and audit reviews of administrative access, but the announcement does not describe new reporting, monitoring, or compliance reporting capabilities. |
| Does the change include an admin control and can it be controlled through Entra ID group membership? | Admins can configure a time limit (1 day to 2 years) for new or existing role group assignments. The feature applies to both users and security groups assigned to role groups assigned in Microsoft Purview portal. |
What changed
Between the versions this installation saw, newest firstThis installation has seen one version of this notice, first on 19 Oct 2026. Later changes will show here.
Linked documentation
Microsoft pages the notice links toThe notice links to no Microsoft Learn or Support page that this installation reads.
Not confirmed here
What this page cannot tell you- Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.
- Versions before 19 Oct 2026: this installation first saw the notice after Microsoft posted it.