RECENTProduct updateAction required
Exchange Online permission management in Defender for Office 365 is now supported in Microsoft Defender unified role-based access control (RBAC)
Analysis / inference: Microsoft Defender unified role-based access control now supports protection-related Exchange Online permissions for Defender for Office 365.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Office 365 - What's new · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
Defender unified RBAC has expanded its scope to include protection-related Exchange Online permissions alongside existing Email and collaboration permissions.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisWhy it matters
Admins can now manage protection-related Exchange Online permissions directly through Microsoft Defender unified RBAC, streamlining security operations access control.
Operational impact
Security administrators can consolidate and streamline role-based access control assignments across Defender workloads and Exchange Online protection features.
Section 03 · Recommended actions
- Review the Exchange Online permissions mapping documentation to understand newly supported roles and manage assignments via Defender unified RBAC.
What to check
- Review current Exchange Online permissions mapped in Defender unified RBAC to ensure appropriate least-privilege assignments.
Affected scope
ProductsDefender for Office 365