RECENTConnector or ingestionAction required
Workday connector updated to least-privilege permission model
Analysis / inference: Microsoft Defender for Cloud Apps has updated the Workday connector to require only View permissions instead of Modify.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Cloud Apps release notes · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
The Workday connector permission model was updated to require only View permissions, eliminating the previous requirement for Modify permissions.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisWhy it matters
Reducing permissions on enterprise connectors limits the blast radius if integration credentials are compromised.
Operational impact
Existing connector configurations will continue to function without interruption, but administrative updates to Workday account settings are recommended to strip unneeded privileges.
Section 03 · Recommended actions
- Update Workday account settings to remove unnecessary modify permissions used by the Defender for Cloud Apps connector.
What to check
- Review current Workday connector integration permissions in Microsoft Defender for Cloud Apps
- Verify if account settings in Workday still assign unnecessary modify rights to the integration user
Affected scope
ProductsDefender for Cloud Apps