Unified RBAC is enabled by default for new Defender for Cloud Apps customers
Analysis / inference: Microsoft is automatically enabling unified role-based access control for new Defender for Cloud Apps customers beginning in August 2026.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Cloud Apps release notes · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
Starting August 2026, newly onboarded Defender for Cloud Apps environments automatically utilize Microsoft Defender unified RB without requiring manual workload activation steps.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisEnabling unified RBAC by default shifts how administrative permissions are managed for newly provisioned tenants, moving away from siloed workload controls to a centralized Defender portal administration model.
Administrators must manage permissions through the centralized Microsoft Defender portal experience instead of relying on older localized workload configuration workflows.
Section 03 · Recommended actions
- Familiarize yourself with the Microsoft Defender unified role-based access control documentation.
- Update internal identity and access management runbooks to reflect centralized portal permission management for new deployments.
- Verify whether your tenant is provisioned after August 2026 to confirm if unified RBAC is active by default.
- Review assigned administrative roles within the centralized Microsoft Defender portal rather than legacy Defender for Cloud Apps standalone settings.