Microsoft Purview compliance portal: Admin assignment time limit
Microsoft Purview will allow admins to set time limits (1 day to 2 years) on role group assignments, enabling temporary access to enhance security and compliance. This feature rolls out worldwide from late July 2026, requires no action, and supports existing and new assignments without impacting workflows. What and Why: Microsoft Purview is introducing the ability to assign a time limit when adding users or security groups to role groups. Administrators can specify a duration from 1 day to 2 years, enabling temporary administrative access and supporting least-privilege security practices. This enhancement helps organizations improve governance and compliance while reducing the risk of unnecessary long-term privileged access. Rollout Schedule: General Availability (Worldwide): Beginning late July 2026; expected to complete by late August 2026 General Availability (GCC, GCC High, DoD): Beginning late August 2026; expected to complete by late September 2026 Impact on Your Organization: Who is affected: Microsoft Purview administrators Security and compliance administrators Organizations using Purview role groups in Worldwide, GCC, GCC High, and DoD environments Platforms/Services: Microsoft Purview compliance portal Microsoft Purview RBAC What will happen: Administrators can assign users or security groups to role groups with a defined expiration period. Assignment durations can range from 1 day to 2 years. The capability applies to existing and new assignments. Existing assignments are not modified automatically. No impact to user workflows. The feature is available by default after rollout. No policy or configuration changes are required. Action Required/Recommendations: No action is required. We recommend that you: Review privileged access management processes. Consider using assignment expiration periods for temporary access scenarios. Update internal documentation where appropriate. Inform Purview administrators of the new capability. Compliance Considerations: Compliance Consideration Assessment Does the change alter how admins can monitor, report on, or demonstrate compliance activities? Temporary role group assignment limits may support governance and audit reviews of administrative access, but the announcement does not describe new reporting, monitoring, or compliance reporting capabilities. Does the change include an admin control and can it be controlled through Entra ID group membership? Admins can configure a time limit (1 day to 2 years) for new or existing […]
The post Microsoft Purview compliance portal: Admin assignment time limit appeared first on M365 Admin.
Published on:
Learn moreWe can help you with Microsoft Purview compliance portal: Admin assignment time limit
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
Microsoft Entra ID: Risk-based anti-bot verification (CAPTCHA) for SMS and voice multi-factor authentication
Starting mid-November 2026, Microsoft Entra ID will add risk-based CAPTCHA verification for SMS and voice MFA to prevent automated fraud. Some...
[Outlook for iOS and Android] Copilot Chat in Outlook UX improvements
Copilot Chat in Outlook for iOS and Android is being updated with a refreshed, consistent design across Microsoft 365 apps, improved chat inte...
Microsoft Word: Retirement of legacy compatibility settings
Microsoft Word will retire legacy compatibility settings for documents in Compatibility Mode starting December 2026 (Windows) and early 2027 (...
Power Platform – Information regarding the end of support for SharePoint temporary authentication URLs
Starting April 1, 2027, SharePoint temporary authentication URLs will be retired. Power Apps and Automate functionality that relies on these U...
Windows Office Hours: November 19, 2026
If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live ...
Scheduled prompts in Microsoft 365 Copilot are moving to native Copilot scheduling and the Tasks view
Microsoft 365 Copilot is moving scheduled prompts from Power Platform to native Copilot scheduling, enabling automatic execution of one-time o...
Prevent issues with NetApp SMB shares: Learn about new Windows Server security requirements
Microsoft introduced additional security requirements for LDAP authentication on Active Directory domain controllers starting with the October...
60-day reminder: Hardening changes for ReFS volumes on removable media
Microsoft is making hardening changes to the Resilient File System (ReFS). The changes improve the security posture of Windows by adding visib...
Microsoft 365 Copilot: Copilot Workspaces is replacing standalone agent selection with agentic chat
Microsoft 365 Copilot Workspaces will replace standalone agent selection (Researcher, Analyst, Designer) with an agentic chat that applies ski...
Microsoft Teams: Updated recording and transcript access setting behavior for town halls and webinars
Microsoft Teams is updating the “Who has access to the recording or transcript” option for Events App town halls and webinars. It ...