Expansion of identity scoping: Support for Organizational units (Preview)
Analysis / inference: Microsoft Defender for Identity introduces preview support for scoping identity access by Active Directory organizational units via XDR user role-based access control.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Identity - What's new · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
Microsoft Defender for Identity added preview support for organizational unit scoping under XDR user role-based access control, building upon previous Active Directory domain scoping capabilities.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisEnabling organizational unit scoping allows SOC administrators to apply granular XDR user role-based access control within Microsoft Defender for Identity, ensuring analysts only view designated identity assets.
Enhances administrative control over analyst visibility by permitting scoping down to specific organizational units rather than whole domains.
Section 03 · Recommended actions
- Review the configuration guide for scoped access in Microsoft Defender for Identity
- Evaluate current RBAC roles to determine where organizational unit scoping should be applied in preview
- Verify XDR user role-based access control settings in Microsoft Defender for Identity for organizational unit support
- Review current identity scoping rules against Active Directory organizational unit structures