{"id":6569,"date":"2024-05-22T09:02:05","date_gmt":"2024-05-22T00:02:05","guid":{"rendered":"https:\/\/m365jp.net\/?p=6569"},"modified":"2024-05-22T09:06:44","modified_gmt":"2024-05-22T00:06:44","slug":"mc794811-plan-for-change-new-rbac-permissions-for-endpoint-security-policies","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2024-05-22-mc794811-plan-for-change-new-rbac-permissions-for-endpoint-security-policies","title":{"rendered":"MC794811 | Plan for Change: New RBAC permissions for endpoint security policies"},"content":{"rendered":"
\n
\n
\n\n\n\n
MC794811 | Plan for Change: New RBAC permissions for endpoint security policies<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\n\n\n\n\n\n\n\n
Classification<\/th>\nplanForChange<\/td>\n<\/tr>\n
Last Updated<\/th>\n05\/21\/2024 23:46:13<\/td>\n<\/tr>\n
Start Time<\/th>\n05\/21\/2024 23:45:55<\/td>\n<\/tr>\n
End Time<\/th>\n07\/31\/2024 07:00:00<\/td>\n<\/tr>\n
Message Content<\/th>\n\n

Today, you can use the role-based access control (RBAC) built-in role<\/a> \u2018Endpoint Security Manager\u2019 to manage policies and features within the Endpoint security node or, you can limit admin actions by using the custom role<\/a> with the \u2018Security baselines\u2019 permission.<\/p>\n

In an upcoming release, we will be adding new permissions for each endpoint security workload to allow for additional granularity. The \u2018Security baselines\u2019 permission previously included all security policies and now, it will only include security workloads that do not have their own permission.<\/p>\n

Stay tuned to What\u2019s new in Intune<\/a> for the release!<\/p>\n

[How this will affect your organization:]<\/p>\n

There is no change in functionality for the built-in role \u2018Endpoint Security Manager\u2019, you will see the additional new permissions listed in ‘Properties’.<\/p>\n

If you are using custom roles with the \u2018Security baselines\u2019 permission, the new permissions will automatically be assigned to ensure your admins continue to have the same permissions they have today. As an example, if an admin has been assigned a custom role with \u2018Security baselines\/Read\u2019 permission, that role would include the new permissions, such as Attack surface reduction\/Read\u2019. The \u2018Security baselines\/Read\u2019 would still be applicable for viewing Security baselines, Firewall, Antivirus, and other security policies that do not have a designated permission. Note:<\/b> All security workloads are expected to eventually have their own permission.<\/p>\n

[What you need to do to prepare:]<\/p>\n

No action is required as Intune will make a service-side update to assign the new permissions for admins with a \u2018Security baselines\u2019 permission as they become available. If you use these permissions and have documented guides on role-based access, you will want to make a note of these changes and update your administrative guidelines. <\/p>\n

If you want to take advantage of the new permissions to add granularity to your roles, stay tuned to What\u2019s new in Intune<\/a> for the release.<\/p>\n

<\/p>\n<\/td>\n<\/tr>\n

Machine Translation<\/th>\n\n

\u73fe\u5728\u3001\u30ed\u30fc\u30eb\u30d9\u30fc\u30b9\u306e\u30a2\u30af\u30bb\u30b9\u5236\u5fa1 (RBAC) \u7d44\u307f\u8fbc\u307f\u30ed\u30fc\u30eb<\/a> “Endpoint Security Manager” \u3092\u4f7f\u7528\u3057\u3066\u3001\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8 \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30ce\u30fc\u30c9\u5185\u306e\u30dd\u30ea\u30b7\u30fc\u3068\u6a5f\u80fd\u3092\u7ba1\u7406\u3057\u305f\u308a\u3001”\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30d9\u30fc\u30b9\u30e9\u30a4\u30f3” \u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u3092\u6301\u3064 \u30ab\u30b9\u30bf\u30e0 \u30ed\u30fc\u30eb<\/a> \u3092\u4f7f\u7528\u3057\u3066\u7ba1\u7406\u8005\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u5236\u9650\u3057\u305f\u308a\u3067\u304d\u307e\u3059\u3002<\/p>\n

\u4eca\u5f8c\u306e\u30ea\u30ea\u30fc\u30b9\u3067\u306f\u3001\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8 \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30ef\u30fc\u30af\u30ed\u30fc\u30c9\u3054\u3068\u306b\u65b0\u3057\u3044\u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u3092\u8ffd\u52a0\u3057\u3066\u3001\u3055\u3089\u306b\u7d30\u5206\u5316\u3067\u304d\u308b\u3088\u3046\u306b\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002”\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30d9\u30fc\u30b9\u30e9\u30a4\u30f3” \u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u306b\u306f\u3001\u4ee5\u524d\u306f\u3059\u3079\u3066\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30dd\u30ea\u30b7\u30fc\u304c\u542b\u307e\u308c\u3066\u3044\u307e\u3057\u305f\u304c\u3001\u73fe\u5728\u306f\u3001\u72ec\u81ea\u306e\u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u3092\u6301\u305f\u306a\u3044\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30ef\u30fc\u30af\u30ed\u30fc\u30c9\u306e\u307f\u304c\u542b\u307e\u308c\u307e\u3059\u3002<\/p>\n

\u30ea\u30ea\u30fc\u30b9\u306e Intune \u306e\u65b0\u6a5f\u80fd<\/a> \u306b\u3054\u671f\u5f85\u304f\u3060\u3055\u3044\u3002<\/p>\n

[\u3053\u308c\u304c\u7d44\u7e54\u306b\u53ca\u307c\u3059\u5f71\u97ff:]<\/p>\n

\u7d44\u307f\u8fbc\u307f\u30ed\u30fc\u30eb “Endpoint Security Manager” \u306e\u6a5f\u80fd\u306b\u5909\u66f4\u306f\u306a\u304f\u3001\u8ffd\u52a0\u306e\u65b0\u3057\u3044\u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u304c [\u30d7\u30ed\u30d1\u30c6\u30a3] \u306b\u4e00\u89a7\u8868\u793a\u3055\u308c\u307e\u3059\u3002<\/p>\n

\u300c\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30d9\u30fc\u30b9\u30e9\u30a4\u30f3\u300d\u6a29\u9650\u3092\u6301\u3064\u30ab\u30b9\u30bf\u30e0\u30ed\u30fc\u30eb\u3092\u4f7f\u7528\u3057\u3066\u3044\u308b\u5834\u5408\u306f\u3001\u65b0\u3057\u3044\u6a29\u9650\u304c\u81ea\u52d5\u7684\u306b\u5272\u308a\u5f53\u3066\u3089\u308c\u308b\u305f\u3081\u3001\u7ba1\u7406\u8005\u306f\u73fe\u5728\u3068\u540c\u3058\u6a29\u9650\u3092\u5f15\u304d\u7d9a\u304d\u6301\u3064\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u305f\u3068\u3048\u3070\u3001\u7ba1\u7406\u8005\u306b “\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30d9\u30fc\u30b9\u30e9\u30a4\u30f3\/\u8aad\u307f\u53d6\u308a” \u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u3092\u6301\u3064\u30ab\u30b9\u30bf\u30e0 \u30ed\u30fc\u30eb\u304c\u5272\u308a\u5f53\u3066\u3089\u308c\u3066\u3044\u308b\u5834\u5408\u3001\u305d\u306e\u30ed\u30fc\u30eb\u306b\u306f\u3001\u653b\u6483\u9762\u306e\u7e2e\u5c0f\/\u8aad\u307f\u53d6\u308a\u306a\u3069\u306e\u65b0\u3057\u3044\u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u304c\u542b\u307e\u308c\u307e\u3059\u3002\u300c\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30d9\u30fc\u30b9\u30e9\u30a4\u30f3\/\u8aad\u307f\u53d6\u308a\u300d\u306f\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30d9\u30fc\u30b9\u30e9\u30a4\u30f3\u3001\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u3001\u30a6\u30a4\u30eb\u30b9\u5bfe\u7b56\u3001\u304a\u3088\u3073\u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u304c\u6307\u5b9a\u3055\u308c\u3066\u3044\u306a\u3044\u305d\u306e\u4ed6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30dd\u30ea\u30b7\u30fc\u3092\u8868\u793a\u3059\u308b\u5834\u5408\u306b\u3082\u9069\u7528\u3067\u304d\u307e\u3059\u3002 \u624b\u8a18\uff1a<\/b> \u3059\u3079\u3066\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30ef\u30fc\u30af\u30ed\u30fc\u30c9\u306f\u3001\u6700\u7d42\u7684\u306b\u72ec\u81ea\u306e\u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u3092\u6301\u3064\u3053\u3068\u304c\u671f\u5f85\u3055\u308c\u307e\u3059\u3002<\/p>\n

[\u6e96\u5099\u306b\u5fc5\u8981\u306a\u3053\u3068:]<\/p>\n

Intune \u3067\u306f\u3001”\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30d9\u30fc\u30b9\u30e9\u30a4\u30f3” \u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u3092\u6301\u3064\u7ba1\u7406\u8005\u306b\u65b0\u3057\u3044\u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u3092\u5272\u308a\u5f53\u3066\u308b\u305f\u3081\u306b\u3001\u30b5\u30fc\u30d3\u30b9\u5074\u306e\u66f4\u65b0\u30d7\u30ed\u30b0\u30e9\u30e0\u304c\u4f7f\u7528\u53ef\u80fd\u306b\u306a\u308b\u305f\u3081\u3001\u30a2\u30af\u30b7\u30e7\u30f3\u306f\u5fc5\u8981\u3042\u308a\u307e\u305b\u3093\u3002\u3053\u308c\u3089\u306e\u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u3092\u4f7f\u7528\u3057\u3001\u30ed\u30fc\u30eb\u30d9\u30fc\u30b9\u306e\u30a2\u30af\u30bb\u30b9\u306b\u95a2\u3059\u308b\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u5316\u3055\u308c\u305f\u30ac\u30a4\u30c9\u304c\u3042\u308b\u5834\u5408\u306f\u3001\u3053\u308c\u3089\u306e\u5909\u66f4\u3092\u30e1\u30e2\u3057\u3001\u7ba1\u7406\u30ac\u30a4\u30c9\u30e9\u30a4\u30f3\u3092\u66f4\u65b0\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

\u65b0\u3057\u3044\u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u3092\u5229\u7528\u3057\u3066\u30ed\u30fc\u30eb\u306b\u7c92\u5ea6\u3092\u8ffd\u52a0\u3059\u308b\u5834\u5408\u306f\u3001\u30ea\u30ea\u30fc\u30b9\u306e \u300cIntune \u306e\u65b0\u6a5f\u80fd<\/a> \u300d\u306b\u3054\u6ce8\u76ee\u304f\u3060\u3055\u3044\u3002<\/p>\n

<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

MC794811 | Plan for Change: New RBAC permissions for endpoint security policies Classification planForChange L […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-6569","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/6569","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=6569"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/6569\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=6569"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=6569"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=6569"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}