Microsoft Intune: Additional granular RBAC controls to manage Antivirus, Firewall, BitLocker, and Endpoint Detection and Response endpoint security workloads

Summary

Expanded granular RBAC controls to manage Endpoint Security workloads. The ‘Security baselines’ permission previously included all security policies and now all security workloads have their own permission set

Status
In development
General availability target
Nov 2025
Preview target
Not published
Products
Microsoft Intune
Clouds
Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD
Release phases
General Availability
Platforms
Android, Desktop, iOS, Mac
Added to the roadmap
18 Aug 2025
Last changed
1 Oct 2025 · 12mo ago
recently changed
ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft. Microsoft, Windows, Microsoft 365, Azure, and related names are trademarks of the Microsoft group of companies. Data comes from public sources listed on Sources; every item links to its original page. Dates and statuses can change after they are read. Built by Evotec. This is the public demo. It can also run on your own server, with your Microsoft 365 tenant and device data kept inside your network; Evotec can help you deploy and extend it.