(Updated) Microsoft Purview compliance portal: Admin assignment time limit

🚨 The Signal: Microsoft Purview now allows time-limited administrative assignments to role groups, from 1 day to 2 years. This enhances least-privilege access, reducing the risk of persistent elevated permissions and improving governance.

The Impact

Microsoft Purview administrators are affected, gaining a new control to mitigate the risk of excessive or persistent privileged access.

• Purview administrators: Can now enforce time-bound access, reducing standing privilege risk.
• Security teams: Gain a control to enforce least privilege for Purview roles.
• Compliance teams: Improved auditability and adherence to temporary access policies.

The Action

1. Review existing Purview role group assignments for opportunities to apply time limits.
2. Update internal privileged access management policies to mandate time-limited Purview assignments.
3. Educate Purview administrators on the new time-limit assignment capability.

Domain: Purview · Impact: medium · Workload: Microsoft Purview · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898