Microsoft Purview | Endpoint DLP: Prepare for the macOS Golden Gate (version 27) accessibility permission change

Apple’s macOS Golden Gate (version 27) lets users disable Accessibility permissions despite MDM settings, affecting Microsoft Purview Endpoint DLP’s monitoring of Safari, Chrome, and Firefox. Endpoint DLP will treat these browsers as unallowed, increasing enforcement alerts. Organizations must update configurations, upgrade clients, and monitor device compliance by early September 2026. Apple is introducing a change in macOS Golden Gate (version 27), currently expected to reach general availability in September 2026. With this change, users can disable Accessibility permissions even when those permissions are deployed and managed through Mobile Device Management (MDM). Microsoft Purview Endpoint Data Loss Prevention (Endpoint DLP) relies on Accessibility permissions to accurately identify the websites, applications, and files involved in user activities. To maintain protection and monitoring capabilities, we are updating Endpoint DLP to accommodate this platform change. Rollout schedule Worldwide, GCC, GCC High and DoD: Beginning in early August 2026 and expected to complete in early September 2026 Impact on your organization Who is affected Organizations using Microsoft Purview Endpoint DLP on managed macOS devices. Platforms and services Microsoft Purview Endpoint DLP macOS devices Microsoft Edge, Safari, Google Chrome, and Mozilla Firefox What will happen On devices where Accessibility permissions are turned off, Safari, Chrome, and Firefox will be treated as unallowed browsers. Endpoint DLP will apply enforcement to upload activities regardless of URL. This may increase block or block with override notifications and may result in additional false-positive events and alerts. In Microsoft Purview, affected devices will display: Configuration status: Not updated on the Device onboarding page Accessibility status: Off in the device flyout Users on affected devices will receive a notification explaining the impact. Organizations can customize this notification through their MDM configuration by updating the plist file. Microsoft Edge is not affected by this change and will continue to function as expected. Action required and recommendations To prepare for this change: Review the updated guidance when it becomes available in mid-August 2026: Next steps. Deploy or validate the required MDM plist configuration that enables Accessibility permissions on managed macOS devices. Upgrade devices to Endpoint DLP client version 101.26070 or later. Monitor device compliance on […]

The post Microsoft Purview | Endpoint DLP: Prepare for the macOS Golden Gate (version 27) accessibility permission change appeared first on M365 Admin.