Tenant will be auto-enabled into Microsoft Defender Unified RBAC

Microsoft Defender Unified RBAC will auto-enable on tenants starting late September 2026, completing by December 2026. It unifies access management across Defender and Sentinel workloads, importing existing roles with a 30-day notification period before activation. Opt-out is available post-activation; other Microsoft permissions remain unchanged. What and why: Microsoft Defender Unified RBAC (URBAC) is becoming the single access model for all Defender and Sentinel portal experiences. Your tenant will be auto enabled to URBAC.   Unified RBAC will be activated automatically for the in-scope workload(s) on your tenant following a notification period that begins when you receive the in-portal notification, and your roles are imported into Unified RBAC. Activation is expected to occur approximately 30 days after that notification date.   Unified RBAC offer more extended access management capabilities, including:  A single access management system to manage all roles and permissions across all workloads  Scoping capabilities such as Cloud, Sentinel, Identity, and Device Groups.     Future-proof assignments that will allow you to include future permissions and workloads  This change applies exclusively to Microsoft Defender. Permissions for Microsoft Purview, Exchange Online, Microsoft Entra directory roles, Privileged Identity Management, and Azure resources (not related to Microsoft Sentinel) remain unchanged. In addition, if you are using Powershell with Microsoft Defender for Office 365, this will continue to work as is.   Rollout Schedule: Global: We will begin rolling out on late September 2026 and expect to complete by late December 2026. Impact on your organization: What you will see: Notification banner:  A notification will be displayed in the Microsoft Defender portal informing customers that the specified workload(s) will transition to Unified RBAC. Legacy RBAC roles are automatically imported into Unified RBAC. This date marks the beginning of the customer notification period before automatic activation  Activation date: Beginning approximately 30 days after the notification date, Unified RBAC will be automatically enabled for the specified workload(s). Customers can review imported role assignments and prepare for the transition during this period.  The in-portal banner in the Microsoft Defender portal (‘Permissions and roles’ page) will confirm activation.  How this will affect your organization:  Your existing roles, if applicable, will be […]

The post Tenant will be auto-enabled into Microsoft Defender Unified RBAC appeared first on M365 Admin.