Scoped access by Active Directory domain now supported (Preview)
Analysis / inference: Microsoft Defender for Identity now supports Active Directory domain scoping in preview using XDR User Role-Based Access Control.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Identity - What's new archive · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
Microsoft Defender for Identity monitoring can now be scoped by Active Directory domains using XDR User Role-Based Access Control (URBAC).
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisEnabling Active Directory domain scoping via XDR User Role-Based Access Control (URBAC) allows security operations teams to enforce least-privilege principles and restrict MDI visibility to specific operational boundaries or regional teams.
Reduces alert noise from nonessential data, tailors coverage to specific user groups or regions, and aligns security analysis with organizational boundaries.
Section 03 · Recommended actions
- Review the configuration documentation for scoped access in Microsoft Defender for Identity.
- Evaluate domain scoping requirements for regional teams and identity administrators.
- Check current XDR User Role-Based Access Control configurations for Microsoft Defender for Identity.
- Verify whether domain-specific scoping requirements apply to your SOC analysts and identity administrators.