Announcing GA of RBAC User Scoping in Microsoft Purview Information Protection and Data Loss Prevention

Microsoft has announced the general availability of RBAC User Scoping in Microsoft Purview Information Protection and Data Loss Prevention. The RBAC controls are now available in the Microsoft Purview compliance portal, extending to the Microsoft 365 Defender Portal. This feature is associated with Microsoft 365 Roadmap ID 93417 and will begin rolling out in late June with expected completion by mid-July.

RBAC User Scoping allows organizations to delegate tasks based on users in specific regions or organizational units. In order to set up RBAC User Scoping, administrative units (AU) must be set up in the Azure Portal and Purview Admin Permissions must be ring-fenced to AU scopes. Admin Unit scoped MIP/DLP policies can then be created and managed, and user scoped DLP Alerts, Incidents, and Logs can be investigated in Purview and M365 Defender. User scoped Activities and events can also be investigated in Activity Explorer.

If your organization does not wish to use the RBAC User Scoping feature, there will be no impact on your organization. To prepare, it is recommended to get started with Information Protection and Data Loss Prevention in the Microsoft Purview compliance portal. To learn more about permissions in the Microsoft Purview compliance portal, consult the link provided.

The announcement was made on Microsoft 365 Roadmap ID 93417 and is available on the M365 Admin website.