Microsoft Secure Score permissions integration with Microsoft Defender unified role-based access control (RBAC) is now in Public Preview
Analysis / inference: Microsoft Secure Score permissions are now integrated into the Microsoft Defender unified RBAC model in public preview.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Secure Score - What's new · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
Microsoft Secure Score access control has shifted from relying solely on Microsoft Entra global roles to supporting granular permissions via the Microsoft Defender XDR Unified RBAC model under the Security posture permissions group, alongside a new Secure Score – Additional data source selector.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisIntegrating Secure Score permissions into Microsoft Defender unified RBAC enables granular delegation of posture visibility, replacing the prior requirement for broad Microsoft Entra global roles.
SOC teams and security administrators can now restrict or delegate Secure Score dashboard access based on specific data sources and tailored roles rather than requiring high-privilege global admin assignments.
Section 03 · Recommended actions
- Review current Microsoft Defender unified RBAC configurations.
- Create custom roles utilizing the Security posture permissions group to scope Secure Score access appropriately.
- Verify existing custom roles in Microsoft Defender unified RBAC to determine if the Security posture permissions group should be assigned.
- Review which users currently hold Entra global roles versus granular RBAC permissions for Secure Score.