Skip to main content
🦉
Message CenterMicrosoft 365 Updates
HomePermissionsTenant FinderPortfolio
🦉
M365 Message Centerby Cengiz YILMAZ

Track the latest updates, features, and announcements for Microsoft 365 services. Comprehensive archive of service updates and important changes.

Quick Links

HomePermissionsTenant FinderPortfolio

Connect

© 2026 M365 Message Center. Created with ❤️ by Cengiz YILMAZ

Data sourced from Microsoft 365 Message Center • Not affiliated with Microsoft

  1. Home
  2. /
  3. MC708505

Unified RBAC provides centralized role-based administration controls for Microsoft Defender for Office 365

Plan for Change

Message ID

MC708505
View in Admin Center

Services

Microsoft Defender XDR

Summary

Unified RBAC for Microsoft Defender for Office 365 offers centralized controls and is now generally available. The "Defender Platform for Office 365" Service Plan rollout completion is rescheduled for early August 2024. Organizations can opt-in to URBAC, which requires configuring new roles to replace existing RBAC permissions. A wizard is available to assist with importing roles from Microsoft Defender for Office 365. Exchange Online permissions need manual setup. Existing Microsoft Entra global roles will be respected under the new URBAC model. For more information, visit Microsoft 365 Defender Unified role-based access control (RBAC) | Microsoft Learn.

Details

Updated August 2, 2024: We have updated the timing of the "Defender Platform for Office 365" Service Plan availability to complete by late July 2024. Thank you for your patience.

Microsoft Defender XDR unified role-based access control (URBAC) provides an alternative to traditional Microsoft Defender for Office 365 (MDO/EOP) and Exchange Online (EXO) RBAC.

When this will happen:

Microsoft Defender XDR unified role-based access control (URBAC) is generally available.

How this will affect your organization:

Microsoft Defender XDR unified role-based access control (URBAC) enables organizations to configure a single set of permissions for their security teams that work for Defender for Office, as well as the other Defender solutions. URBAC is currently in opt-in mode. 
The new Service Plan has no impact on your organization. 

What you need to do to prepare:

Microsoft Defender XDR unified role-based access control (URBAC) provides an alternative to traditional Microsoft Defender for Office 365 (MDO/EOP) and Exchange Online (EXO) RBAC. By default, there are no changes to your security portal permissions. If you want to enable Unified RBAC, then you must first configure the new URBAC roles for your organization. Once you have configured these roles, then you can enable use of URBAC for ‘Microsoft Defender for Office’ permissions and/or ‘Exchange Online’ permissions. Doing so replaces your existing RBAC with the new roles. You can find more information over here - Microsoft 365 Defender Unified role-based access control (RBAC) | Microsoft Learn. 

Unified RBAC provides an import roles wizard which will help migrate the permissions from your Microsoft Defender for Office 365 role groups. It will create URBAC role groups with permissions that mirror the legacy permissions and groups you have already set up. It will not migrate/replicate Exchange Online permissions – these will require manual configuration in URBAC role groups. 

Please note that URBAC will continue to respect existing Microsoft Entra global roles when you activate the Microsoft Defender XDR Unified RBAC model for Defender for Office 365. i.e. Global Admins and Security Admins will retain assigned admin privileges.

Timeline

📅
Published
Jan 20, 2024
Message published to Message Center
✏️
Updated
Aug 2, 2024
Message content updated
🏁
End Date
Sep 16, 2024
Message timeline ends

Tags

#Updated message#New feature#User impact#Admin impact

Category

📋Plan for Change

Related Messages

Similar updates

MC711337

Microsoft Defender XDR for Office 365: Streamlined false positive submissions for quarantined files

Jan 30, 2024
MC687846

New Microsoft Defender Antivirus services on Windows Devices

Nov 7, 2023
MC698130●

Threat Protection report page retirement

Dec 14, 2023
MC1147984

Microsoft Teams: User reporting for incorrectly identified security concerns

Sep 4, 2025
MC1133508

Microsoft Teams Integration with Microsoft Defender for Office Tenant Allow/Block List for blocking domains

Aug 11, 2025