{"id":18739,"date":"2026-09-26T07:03:44","date_gmt":"2026-09-25T22:03:44","guid":{"rendered":"https:\/\/m365jp.net\/?p=18739"},"modified":"2026-09-26T07:04:48","modified_gmt":"2026-09-25T22:04:48","slug":"mc1479503-microsoft-defender-for-cloud-apps-permission-changes-for-select-app-governance-entra-roles","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2026-09-26-mc1479503-microsoft-defender-for-cloud-apps-permission-changes-for-select-app-governance-entra-roles","title":{"rendered":"MC1479503 | Microsoft Defender for Cloud Apps: Permission changes for select App Governance Entra roles"},"content":{"rendered":"
\n
\n
\n\n\n\n
MC1479503 | Microsoft Defender for Cloud Apps: Permission changes for select App Governance Entra roles<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\n\n\n\n\n\n\n
Classification<\/th>\nplanForChange<\/td>\n<\/tr>\n
Last Updated<\/th>\n09\/25\/2026 21:33:20<\/td>\n<\/tr>\n
Start Time<\/th>\n09\/25\/2026 21:33:11<\/td>\n<\/tr>\n
End Time<\/th>\n12\/30\/2026 08:00:00<\/td>\n<\/tr>\n
Message Content<\/th>\n\n

[What and Why:]<\/b><\/p>\n

We are introducing Microsoft Defender XDR Unified role-based access control (Unified RBAC) support for App Governance. As part of this rollout, App Governance permissions associated with select Microsoft Entra roles will change.<\/p>\n

This update helps align App Governance access with Defender XDR role management and provides more consistent permission handling for organizations using Microsoft Defender for Cloud Apps.<\/p>\n

[Rollout Schedule:]<\/b><\/p>\n

General Availability (Worldwide): We will begin rolling out in mid-October 2026 and expect to complete by late October 2026.<\/p>\n

[Impact on Your Organization:]<\/b><\/p>\n

Who is affected:<\/b><\/p>\n

    \n
  • Admins who manage App Governance in Microsoft Defender for Cloud Apps.<\/li>\n
  • Users assigned Cloud App Security Administrator, Compliance Administrator, Compliance Data Administrator, or custom Microsoft Defender XDR Unified RBAC roles for Microsoft Defender for Cloud Apps.<\/li>\n<\/ul>\n

    Platforms\/Services:<\/b><\/p>\n

      \n
    • Microsoft Defender XDR.<\/li>\n
    • Microsoft Defender for Cloud Apps.<\/li>\n
    • App Governance.<\/li>\n<\/ul>\n

      What will happen:<\/b><\/p>\n

        \n
      • Cloud App Security Administrator:<\/b> Users with this Microsoft Entra role will gain permission to view and manage App Governance policies.<\/li>\n
      • Compliance Administrator:<\/b> Users with this Microsoft Entra role will no longer be able to manage App Governance policies or enable and disable App Governance in Settings.<\/li>\n
      • Compliance Data Administrator:<\/b> Users with this Microsoft Entra role will no longer be able to enable and disable App Governance in Settings.<\/li>\n
      • Custom Defender XDR Unified RBAC roles:<\/b> Users assigned a custom role in Defender XDR Unified RBAC for Microsoft Defender for Cloud Apps will also get access to App Governance features.<\/li>\n<\/ul>\n

        [Action Required\/Recommendations:]<\/b><\/p>\n

        Before the enforcement date, we recommend that admins:<\/p>\n

          \n
        • Review users who access App Governance through the Compliance Administrator, Compliance Data Administrator, or Cloud App Security Administrator role.<\/li>\n
        • Review custom roles in Microsoft Defender XDR Unified RBAC for Microsoft Defender for Cloud Apps.<\/li>\n
        • Assign another supported Microsoft Entra role or a custom Defender XDR Unified RBAC role to affected users, following least-privilege principles.<\/li>\n
        • Update internal role assignment guidance and administrator documentation as needed.<\/li>\n<\/ul>\n

          [Compliance considerations:]<\/b><\/p>\n\n\n\n\n\n
          Does the change include an admin control, and can it be controlled through Entra ID group membership?<\/td>\nThis change affects App Governance permissions for selected Microsoft Entra roles and custom Microsoft Defender XDR Unified RBAC roles. Admins should review affected role assignments and update them as needed.<\/td>\n<\/tr>\n
          Does the change alter how admins can monitor, report on, or demonstrate compliance activities?<\/td>\nThe change affects which admin roles can access and manage App Governance policies and settings.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/td>\n<\/tr>\n
          Machine Translation<\/th>\n\n

          [\u4f55\u3068\u306a\u305c:]<\/b><\/p>\n

          App Governance\u5411\u3051\u306bMicrosoft Defender XDR Unified role-based access control(Unified RBAC)\u30b5\u30dd\u30fc\u30c8\u3092\u5c0e\u5165\u3057\u307e\u3059\u3002\u3053\u306e\u5c55\u958b\u306e\u4e00\u74b0\u3068\u3057\u3066\u3001\u7279\u5b9a\u306eMicrosoft Entra\u5f79\u5272\u306b\u95a2\u9023\u3059\u308bApp Governance\u6a29\u9650\u304c\u5909\u66f4\u3055\u308c\u307e\u3059\u3002<\/p>\n

          \u3053\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306b\u3088\u308a\u3001App Governance\u3078\u306e\u30a2\u30af\u30bb\u30b9\u304cDefender XDR\u30ed\u30fc\u30eb\u7ba1\u7406\u3068\u6574\u5408\u3057\u3001Microsoft Defender for Cloud Apps\u3092\u4f7f\u7528\u3059\u308b\u7d44\u7e54\u306b\u5bfe\u3057\u3066\u3088\u308a\u4e00\u8cab\u3057\u305f\u6a29\u9650\u51e6\u7406\u304c\u63d0\u4f9b\u3055\u308c\u307e\u3059\u3002<\/p>\n

          [\u5c55\u958b\u30b9\u30b1\u30b8\u30e5\u30fc\u30eb:]<\/b><\/p>\n

          \u4e00\u822c\u516c\u958b(\u4e16\u754c)\u306f2026\u5e7410\u6708\u4e2d\u65ec\u304b\u3089\u5c55\u958b\u3092\u958b\u59cb\u3057\u30012026\u5e7410\u6708\u4e0b\u65ec\u307e\u3067\u306b\u5b8c\u4e86\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002<\/p>\n

          [\u7d44\u7e54\u3078\u306e\u5f71\u97ff:]<\/b><\/p>\n

          \u5f71\u97ff\u3092\u53d7\u3051\u308b\u4eba\u7269:<\/b><\/p>\n

            \n
          • Microsoft Defender for Cloud Apps\u3067\u30a2\u30d7\u30ea\u30ac\u30d0\u30ca\u30f3\u30b9\u3092\u7ba1\u7406\u3059\u308b\u7ba1\u7406\u8005\u3002<\/li>\n
          • \u30e6\u30fc\u30b6\u30fc\u306fCloud App Security Administrator\u3001Compliance Administrator\u3001Compliance Data Administrator\u3001\u307e\u305f\u306fMicrosoft Defender for Cloud Apps\u5411\u3051\u306b\u30ab\u30b9\u30bf\u30e0\u306eMicrosoft Defender XDR Unified RBAC\u5f79\u5272\u3092\u5272\u308a\u5f53\u3066\u307e\u3057\u305f\u3002<\/li>\n<\/ul>\n

            \u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\/\u30b5\u30fc\u30d3\u30b9:<\/b><\/p>\n

              \n
            • Microsoft Defender XDR\u3002<\/li>\n
            • Microsoft Defender for Cloud Apps\u3002<\/li>\n
            • \u30a2\u30d7\u30ea\u30ac\u30d0\u30ca\u30f3\u30b9\u3002<\/li>\n<\/ul>\n

              \u4eca\u5f8c\u306e\u5c55\u958b:<\/b><\/p>\n

                \n
              • \u30af\u30e9\u30a6\u30c9\u30a2\u30d7\u30ea\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7ba1\u7406\u8005:<\/b> \u3053\u306eMicrosoft Entra\u306e\u5f79\u5272\u3092\u6301\u3064\u30e6\u30fc\u30b6\u30fc\u306f\u3001App Governance\u30dd\u30ea\u30b7\u30fc\u306e\u95b2\u89a7\u304a\u3088\u3073\u7ba1\u7406\u6a29\u9650\u3092\u5f97\u307e\u3059\u3002<\/li>\n
              • \u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u7ba1\u7406\u8005:<\/b> \u3053\u306eMicrosoft Entra\u306e\u5f79\u5272\u3092\u6301\u3064\u30e6\u30fc\u30b6\u30fc\u306f\u3001\u8a2d\u5b9a\u3067App Governance\u30dd\u30ea\u30b7\u30fc\u306e\u7ba1\u7406\u3084\u6709\u52b9\u30fb\u7121\u52b9\u306e\u64cd\u4f5c\u304c\u3067\u304d\u306a\u304f\u306a\u308a\u307e\u3059\u3002<\/li>\n
              • \u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u30c7\u30fc\u30bf\u7ba1\u7406\u8005:<\/b> \u3053\u306eMicrosoft Entra\u306e\u5f79\u5272\u3092\u6301\u3064\u30e6\u30fc\u30b6\u30fc\u306f\u3001\u8a2d\u5b9a\u3067\u30a2\u30d7\u30ea\u30ac\u30d0\u30ca\u30f3\u30b9\u306e\u6709\u52b9\u5316\u30fb\u7121\u52b9\u3092\u884c\u3048\u306a\u304f\u306a\u308a\u307e\u3059\u3002<\/li>\n
              • \u30ab\u30b9\u30bf\u30e0Defender XDR Unified RBAC\u306e\u5f79\u5272:<\/b> Microsoft Defender for Cloud Apps\u306eDefender XDR Unified RBAC\u3067\u30ab\u30b9\u30bf\u30e0\u30ed\u30fc\u30eb\u3092\u5272\u308a\u5f53\u3066\u305f\u30e6\u30fc\u30b6\u30fc\u306f\u3001App Governance\u6a5f\u80fd\u306b\u3082\u30a2\u30af\u30bb\u30b9\u3067\u304d\u307e\u3059\u3002<\/li>\n<\/ul>\n

                [\u5fc5\u8981\u306a\u884c\u52d5\/\u63a8\u5968\u4e8b\u9805:]<\/b><\/p>\n

                \u65bd\u884c\u65e5\u524d\u306b\u306f\u3001\u7ba1\u7406\u8005\u306e\u7686\u69d8\u306b\u4ee5\u4e0b\u306e\u3053\u3068\u3092\u63a8\u5968\u3057\u307e\u3059:<\/p>\n

                  \n
                • \u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u7ba1\u7406\u8005\u3001\u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u30c7\u30fc\u30bf\u7ba1\u7406\u8005\u3001\u307e\u305f\u306f\u30af\u30e9\u30a6\u30c9\u30a2\u30d7\u30ea\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7ba1\u7406\u8005\u306e\u5f79\u5272\u3092\u901a\u3058\u3066\u30a2\u30d7\u30ea\u30ac\u30d0\u30ca\u30f3\u30b9\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u30e6\u30fc\u30b6\u30fc\u3092\u30ec\u30d3\u30e5\u30fc\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/li>\n
                • Microsoft Defender XDR Unified RBAC for Microsoft Defender for Cloud Apps \u306e\u30ab\u30b9\u30bf\u30e0\u30ed\u30fc\u30eb\u3092\u30ec\u30d3\u30e5\u30fc\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/li>\n
                • \u5f71\u97ff\u3092\u53d7\u3051\u305f\u30e6\u30fc\u30b6\u30fc\u306b\u3001\u6700\u5c0f\u6a29\u9650\u539f\u5247\u306b\u5f93\u3044\u3001\u5225\u306e\u30b5\u30dd\u30fc\u30c8\u3055\u308c\u3066\u3044\u308bMicrosoft Entra\u30ed\u30fc\u30eb\u307e\u305f\u306f\u30ab\u30b9\u30bf\u30e0Defender XDR Unified RBAC\u30ed\u30fc\u30eb\u3092\u5272\u308a\u5f53\u3066\u3066\u304f\u3060\u3055\u3044\u3002<\/li>\n
                • \u5fc5\u8981\u306b\u5fdc\u3058\u3066\u793e\u5185\u5f79\u5272\u5272\u308a\u5f53\u3066\u306e\u30ac\u30a4\u30c0\u30f3\u30b9\u3084\u7ba1\u7406\u8005\u306e\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3092\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/li>\n<\/ul>\n

                  [\u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u4e0a\u306e\u8003\u616e\u4e8b\u9805:]<\/b><\/p>\n\n\n\n\n
                  \u5909\u66f4\u306b\u306f\u7ba1\u7406\u8005\u6a29\u9650\u304c\u542b\u307e\u308c\u3066\u3044\u307e\u3059\u304b?\u307e\u305f\u3001Entra ID\u306e\u30b0\u30eb\u30fc\u30d7\u30e1\u30f3\u30d0\u30fc\u30b7\u30c3\u30d7\u3092\u901a\u3058\u3066\u7ba1\u7406\u3067\u304d\u307e\u3059\u304b?<\/td>\n\u3053\u306e\u5909\u66f4\u306f\u3001\u9078\u629e\u3055\u308c\u305fMicrosoft Entra\u30ed\u30fc\u30eb\u304a\u3088\u3073\u30ab\u30b9\u30bf\u30e0Microsoft Defender XDR Unified RBAC\u30ed\u30fc\u30eb\u306eApp Governance\u6a29\u9650\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u307e\u3059\u3002\u7ba1\u7406\u8005\u306f\u5f71\u97ff\u3092\u53d7\u3051\u305f\u30ed\u30fc\u30eb\u5272\u308a\u5f53\u3066\u3092\u78ba\u8a8d\u3057\u3001\u5fc5\u8981\u306b\u5fdc\u3058\u3066\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/td>\n<\/tr>\n
                  \u3053\u306e\u5909\u66f4\u306f\u7ba1\u7406\u8005\u304c\u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u6d3b\u52d5\u3092\u76e3\u8996\u3001\u5831\u544a\u3001\u307e\u305f\u306f\u793a\u3059\u65b9\u6cd5\u306b\u5909\u5316\u3092\u3082\u305f\u3089\u3057\u307e\u3059\u304b?<\/td>\n\u3053\u306e\u5909\u66f4\u306b\u3088\u308a\u3001\u3069\u306e\u7ba1\u7406\u8005\u30ed\u30fc\u30eb\u304c\u30a2\u30d7\u30ea\u30ac\u30d0\u30ca\u30f3\u30b9\u306e\u30dd\u30ea\u30b7\u30fc\u3084\u8a2d\u5b9a\u306b\u30a2\u30af\u30bb\u30b9\u3057\u7ba1\u7406\u3067\u304d\u308b\u304b\u304c\u5909\u308f\u308a\u307e\u3059\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"

                  MC1479503 | Microsoft Defender for Cloud Apps: Permission changes for select App Governance Entra roles Classi […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-18739","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/18739","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=18739"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/18739\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=18739"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=18739"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=18739"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}