{"id":18118,"date":"2026-08-27T08:04:22","date_gmt":"2026-08-26T23:04:22","guid":{"rendered":"https:\/\/m365jp.net\/?p=18118"},"modified":"2026-08-27T08:05:22","modified_gmt":"2026-08-26T23:05:22","slug":"mc1462464-microsoft-defender-for-cloud-apps-app-governance-support-for-the-cloud-application-administrator-role-is-being-retired","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2026-08-27-mc1462464-microsoft-defender-for-cloud-apps-app-governance-support-for-the-cloud-application-administrator-role-is-being-retired","title":{"rendered":"MC1462464 | Microsoft Defender for Cloud Apps: App Governance support for the Cloud Application Administrator role is being retired"},"content":{"rendered":"
\n
\n
\n\n\n\n
MC1462464 | Microsoft Defender for Cloud Apps: App Governance support for the Cloud Application Administrator role is being retired<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\n\n\n\n\n\n\n\n
Classification<\/th>\nplanForChange<\/td>\n<\/tr>\n
Last Updated<\/th>\n08\/26\/2026 22:31:45<\/td>\n<\/tr>\n
Start Time<\/th>\n08\/26\/2026 22:31:24<\/td>\n<\/tr>\n
End Time<\/th>\n11\/02\/2026 08:00:00<\/td>\n<\/tr>\n
Action Required By Date<\/th>\n2026-09-25T07:00:00Z<\/td>\n<\/tr>\n
Message Content<\/th>\n\n

[What and why]<\/b><\/p>\n

Microsoft Defender for Cloud Apps is updating the Microsoft Entra roles that grant access to App Governance when Unified Role-Based Access Control (URBAC) is enabled. As part of this change, support for the Cloud Application Administrator role will be retired for App Governance access.<\/p>\n

This change aligns App Governance access with the standard supported role set used across Microsoft Defender services and supports future role-based access enhancements.<\/p>\n

[Rollout schedule]<\/b><\/p>\n

    \n
  • Retirement (Worldwide):<\/b> Beginning in late September 2026<\/b><\/li>\n
  • Enforcement date: September 26, 2026<\/b><\/li>\n<\/ul>\n

    [Impact on your organization]<\/b><\/p>\n

    Who is affected<\/i><\/p>\n

      \n
    • Organizations that use App Governance in Microsoft Defender for Cloud Apps and have administrators who access App Governance using only the Cloud Application Administrator Microsoft Entra role<\/li>\n<\/ul>\n

      Platforms and services<\/i><\/p>\n

        \n
      • Microsoft Defender for Cloud Apps<\/li>\n
      • App Governance<\/li>\n
      • Microsoft Entra ID<\/li>\n<\/ul>\n

        What will happen<\/i><\/p>\n

        After September 26, 2026:<\/p>\n

          \n
        • Administrators assigned only the Cloud Application Administrator role will no longer be able to access App Governance when URBAC is enabled for Defender for Cloud Apps.<\/li>\n
        • Administrators assigned one of the supported roles will continue to have access based on their permissions.<\/li>\n
        • No user experience changes are expected.<\/li>\n<\/ul>\n

          [Action required and recommendations]<\/b><\/p>\n

          Review administrator assignments by September 25, 2026<\/b>.<\/p>\n

          Assign an appropriate supported role to any administrator who requires App Governance access. Supported roles include:<\/p>\n

            \n
          • Security Administrator<\/li>\n
          • Compliance Administrator<\/li>\n
          • Compliance Data Administrator<\/li>\n
          • Security Operator<\/li>\n
          • Security Reader<\/li>\n
          • Application Administrator<\/li>\n
          • Global Reader<\/li>\n<\/ul>\n

            We recommend assigning the role with the minimum permissions required for each administrator’s responsibilities.<\/p>\n

            [Compliance considerations]<\/b><\/p>\n\n\n\n\n\n\n\n\n
            Question<\/b><\/td>\nAnswer<\/b><\/td>\n<\/tr>\n
            Does this change modify administrative access to a Microsoft 365 service?<\/td>\nYes. This change removes App Governance access for administrators who are assigned only the Cloud Application Administrator Microsoft Entra role when URBAC is enabled for Microsoft Defender for Cloud Apps.<\/td>\n<\/tr>\n
            Does this change require organizations to review or update role assignments?<\/td>\nYes. Organizations should review current administrator role assignments and assign a supported role to administrators who require App Governance access before September 26, 2026.<\/td>\n<\/tr>\n
            Does this change affect how administrators control or access the service?<\/td>\nYes. Access to App Governance will be governed by a revised set of supported Microsoft Entra roles, changing how some administrators obtain access to the service.<\/td>\n<\/tr>\n
            Does this change involve an administrative control or permissions change?<\/td>\nYes. The change retires support for one administrative role and requires use of one of the supported roles to maintain App Governance access.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

            <\/b><\/p>\n<\/td>\n<\/tr>\n

            Machine Translation<\/th>\n\n

            [\u4f55\u3068\u306a\u305c]<\/b><\/p>\n

            Microsoft Defender for Cloud Apps\u306f\u3001\u7d71\u5408\u30ed\u30fc\u30eb\u30d9\u30fc\u30b9\u30a2\u30af\u30bb\u30b9\u5236\u5fa1(URBAC)\u304c\u6709\u52b9\u5316\u3055\u308c\u305f\u969b\u306bApp Governance\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u4ed8\u4e0e\u3059\u308bMicrosoft Entra\u30ed\u30fc\u30eb\u3092\u66f4\u65b0\u3057\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u5909\u66f4\u306e\u4e00\u74b0\u3068\u3057\u3066\u3001Cloud Application Administrator\u306e\u5f79\u5272\u306e\u30b5\u30dd\u30fc\u30c8\u306fApp Governance\u3078\u306e\u30a2\u30af\u30bb\u30b9\u306b\u95a2\u3057\u3066\u7d42\u4e86\u3057\u307e\u3059\u3002<\/p>\n

            \u3053\u306e\u5909\u66f4\u306b\u3088\u308a\u3001App Governance\u306e\u30a2\u30af\u30bb\u30b9\u306fMicrosoft Defender\u30b5\u30fc\u30d3\u30b9\u3067\u6a19\u6e96\u7684\u306b\u30b5\u30dd\u30fc\u30c8\u3055\u308c\u3066\u3044\u308b\u30ed\u30fc\u30eb\u30bb\u30c3\u30c8\u3068\u6574\u5408\u3057\u3001\u5c06\u6765\u306e\u30ed\u30fc\u30eb\u30d9\u30fc\u30b9\u30a2\u30af\u30bb\u30b9\u306e\u5f37\u5316\u3082\u30b5\u30dd\u30fc\u30c8\u3057\u307e\u3059\u3002<\/p>\n

            [\u5c55\u958b\u30b9\u30b1\u30b8\u30e5\u30fc\u30eb]<\/b><\/p>\n

              \n
            • \u9000\u8077(\u4e16\u754c\u898f\u6a21):<\/b> 2026\u5e749\u6708\u4e0b\u65ec<\/b>\u304b\u3089\u958b\u59cb<\/li>\n
            • \u65bd\u884c\u65e5:2026\u5e749\u670826\u65e5<\/b><\/li>\n<\/ul>\n

              [\u7d44\u7e54\u3078\u306e\u5f71\u97ff]<\/b><\/p>\n

              \u5f71\u97ff\u3092\u53d7\u3051\u308b\u4eba\u7269<\/i><\/p>\n

                \n
              • Microsoft Defender for Cloud Apps \u3067 App Governance \u3092\u4f7f\u7528\u3057\u3001\u7ba1\u7406\u8005\u304c Cloud Application Administrator Microsoft Entra \u5f79\u5272\u306e\u307f\u3067 App Governance \u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u7d44\u7e54<\/li>\n<\/ul>\n

                \u30db\u30fc\u30e0\u3068\u30b5\u30fc\u30d3\u30b9<\/i><\/p>\n

                  \n
                • Microsoft Defender for Cloud Apps<\/li>\n
                • \u30a2\u30d7\u30ea\u30ac\u30d0\u30ca\u30f3\u30b9<\/li>\n
                • Microsoft Entra ID<\/li>\n<\/ul>\n

                  \u4f55\u304c\u8d77\u3053\u308b\u306e\u304b<\/i><\/p>\n

                  2026\u5e749\u670826\u65e5\u4ee5\u964d:<\/p>\n

                    \n
                  • Cloud Application Administrator\u306e\u5f79\u5272\u306e\u307f\u306b\u5272\u308a\u5f53\u3066\u3089\u308c\u305f\u7ba1\u7406\u8005\u306f\u3001Defender for Cloud Apps\u3067URBAC\u3092\u6709\u52b9\u306b\u3059\u308b\u3068App Governance\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u306a\u304f\u306a\u308a\u307e\u3059\u3002<\/li>\n
                  • \u30b5\u30dd\u30fc\u30c8\u3055\u308c\u3066\u3044\u308b\u5f79\u5272\u306e\u3044\u305a\u308c\u304b\u306b\u5272\u308a\u5f53\u3066\u3089\u308c\u305f\u7ba1\u7406\u8005\u306f\u3001\u305d\u306e\u6a29\u9650\u306b\u57fa\u3065\u3044\u3066\u5f15\u304d\u7d9a\u304d\u30a2\u30af\u30bb\u30b9\u6a29\u3092\u6301\u3061\u307e\u3059\u3002<\/li>\n
                  • \u30e6\u30fc\u30b6\u30fc\u4f53\u9a13\u306e\u5909\u66f4\u306f\u671f\u5f85\u3055\u308c\u3066\u3044\u307e\u305b\u3093\u3002<\/li>\n<\/ul>\n

                    [\u884c\u52d5\u304c\u5fc5\u8981\u3068\u63d0\u8a00]<\/b><\/p>\n

                    \u7ba1\u7406\u8005\u306e\u5272\u308a\u5f53\u3066\u306f2026\u5e749\u670825<\/b>\u65e5\u307e\u3067\u306b \u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n

                    \u30a2\u30d7\u30ea\u30ac\u30d0\u30ca\u30f3\u30b9\u30a2\u30af\u30bb\u30b9\u304c\u5fc5\u8981\u306a\u7ba1\u7406\u8005\u306b\u306f\u3001\u9069\u5207\u306a\u30b5\u30dd\u30fc\u30c8\u30ed\u30fc\u30eb\u3092\u5272\u308a\u5f53\u3066\u307e\u3059\u3002\u30b5\u30dd\u30fc\u30c8\u3055\u308c\u308b\u30ed\u30fc\u30eb\u306b\u306f\u4ee5\u4e0b\u304c\u542b\u307e\u308c\u307e\u3059:<\/p>\n

                      \n
                    • \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7ba1\u7406\u8005<\/li>\n
                    • \u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u7ba1\u7406\u8005<\/li>\n
                    • \u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u30c7\u30fc\u30bf\u7ba1\u7406\u8005<\/li>\n
                    • \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30aa\u30da\u30ec\u30fc\u30bf\u30fc<\/li>\n
                    • \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ea\u30fc\u30c0\u30fc<\/li>\n
                    • \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u7ba1\u7406\u8005<\/li>\n
                    • \u30b0\u30ed\u30fc\u30d0\u30eb\u30fb\u30ea\u30fc\u30c0\u30fc<\/li>\n<\/ul>\n

                      \u5404\u7ba1\u7406\u8005\u306e\u8cac\u4efb\u306b\u5fc5\u8981\u306a\u6700\u4f4e\u9650\u306e\u6a29\u9650\u3092\u6301\u3064\u5f79\u5272\u3092\u5272\u308a\u5f53\u3066\u308b\u3053\u3068\u3092\u63a8\u5968\u3057\u307e\u3059\u3002<\/p>\n

                      [\u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306e\u8003\u616e\u4e8b\u9805]<\/b><\/p>\n\n\n\n\n\n\n\n
                      \u8cea\u554f<\/b><\/td>\n\u56de\u7b54<\/b><\/td>\n<\/tr>\n
                      \u3053\u306e\u5909\u66f4\u306fMicrosoft 365\u30b5\u30fc\u30d3\u30b9\u306e\u7ba1\u7406\u30a2\u30af\u30bb\u30b9\u3092\u5909\u66f4\u3059\u308b\u306e\u3067\u3057\u3087\u3046\u304b?<\/td>\n\u306f\u3044\u3002\u3053\u306e\u5909\u66f4\u306b\u3088\u308a\u3001Microsoft Defender for Cloud Apps\u3067URBAC\u304c\u6709\u52b9\u5316\u3055\u308c\u305f\u969b\u306bCloud Application Administrator Microsoft Entra\u306e\u5f79\u5272\u306e\u307f\u304c\u5272\u308a\u5f53\u3066\u3089\u308c\u3066\u3044\u308b\u7ba1\u7406\u8005\u306eApp Governance\u30a2\u30af\u30bb\u30b9\u304c\u524a\u9664\u3055\u308c\u307e\u3059\u3002<\/td>\n<\/tr>\n
                      \u3053\u306e\u5909\u66f4\u306b\u3088\u308a\u3001\u7d44\u7e54\u306f\u5f79\u5272\u5272\u308a\u5f53\u3066\u3092\u898b\u76f4\u3057\u305f\u308a\u66f4\u65b0\u3057\u305f\u308a\u3059\u308b\u5fc5\u8981\u306f\u3042\u308a\u307e\u3059\u304b?<\/td>\n\u306f\u3044\u3002\u7d44\u7e54\u306f\u73fe\u5728\u306e\u7ba1\u7406\u8005\u306e\u5f79\u5272\u5272\u308a\u5f53\u3066\u3092\u78ba\u8a8d\u3057\u30012026\u5e749\u670826\u65e5\u307e\u3067\u306bApp Governance\u30a2\u30af\u30bb\u30b9\u304c\u5fc5\u8981\u306a\u7ba1\u7406\u8005\u306b\u30b5\u30dd\u30fc\u30c8\u30ed\u30fc\u30eb\u3092\u5272\u308a\u5f53\u3066\u308b\u3079\u304d\u3067\u3059\u3002<\/td>\n<\/tr>\n
                      \u3053\u306e\u5909\u66f4\u306f\u7ba1\u7406\u8005\u304c\u30b5\u30fc\u30d3\u30b9\u306e\u7ba1\u7406\u3084\u30a2\u30af\u30bb\u30b9\u306b\u5f71\u97ff\u3057\u307e\u3059\u304b?<\/td>\n\u306f\u3044\u3002App Governance\u3078\u306e\u30a2\u30af\u30bb\u30b9\u306f\u3001Microsoft Entra\u306e\u5bfe\u5fdc\u30ed\u30fc\u30eb\u306e\u6539\u8a02\u30bb\u30c3\u30c8\u306b\u3088\u3063\u3066\u7ba1\u7406\u3055\u308c\u3001\u4e00\u90e8\u306e\u7ba1\u7406\u8005\u304c\u30b5\u30fc\u30d3\u30b9\u3078\u306e\u30a2\u30af\u30bb\u30b9\u65b9\u6cd5\u3092\u5909\u66f4\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n
                      \u3053\u306e\u5909\u66f4\u306f\u7ba1\u7406\u4e0a\u306e\u7ba1\u7406\u7ba1\u7406\u3084\u6a29\u9650\u306e\u5909\u66f4\u3092\u542b\u3093\u3067\u3044\u307e\u3059\u304b?<\/td>\n\u306f\u3044\u3002\u3053\u306e\u5909\u66f4\u306b\u3088\u308a\u30011\u3064\u306e\u7ba1\u7406\u30ed\u30fc\u30eb\u306e\u30b5\u30dd\u30fc\u30c8\u304c\u7d42\u4e86\u3057\u3001\u30a2\u30d7\u30ea\u30ac\u30d0\u30ca\u30f3\u30b9\u30a2\u30af\u30bb\u30b9\u3092\u7dad\u6301\u3059\u308b\u305f\u3081\u306b\u30b5\u30dd\u30fc\u30c8\u3055\u308c\u3066\u3044\u308b\u30ed\u30fc\u30eb\u306e\u3044\u305a\u308c\u304b\u3092\u4f7f\u3046\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                      <\/b><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

                      MC1462464 | Microsoft Defender for Cloud Apps: App Governance support for the Cloud Application Administrator […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-18118","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/18118","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=18118"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/18118\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=18118"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=18118"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=18118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}