Microsoft Viva: Advanced moderation access control for corporate communicators

🚨 The Signal: Viva now allows network admins to grant corporate communicators advanced moderation access for AI-detected themes and keywords. This enables delegated content governance, but requires careful permission management to prevent misuse.

The Impact

Admins and Security Teams are affected by new delegation capabilities, creating a risk of over-privileged access if not managed correctly.

  • Admins: Must review and configure new access controls carefully.
  • Security Teams: Need to update access policies for content moderation.
  • Corporate Communicators: Gain new moderation powers, increasing their responsibility.
  • Organisations: Risk of unapproved content if permissions are too broad.

The Action

  1. Review existing Viva roles and permissions for corporate communicators.
  2. Define a clear policy for advanced moderation access, specifying who can be granted this role.
  3. Grant advanced moderation access only to specific, authorised corporate communicators.
  4. Regularly audit assigned advanced moderation access permissions in Viva.
  5. Integrate Viva moderation access into your organisation's broader access review process.

Domain: Other · Impact: medium · Workload: Other · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898