Microsoft Viva: Viva Glint - New Survey Owner role provides access to survey results

🚨 The Signal: Viva Glint introduces a new 'Survey Owner' role, granting access to survey results and management. This change impacts data confidentiality by expanding who can view sensitive organizational feedback.

The Impact

Admins and Security Teams are affected by new data access controls, increasing the risk of unauthorized sensitive data exposure if not managed correctly.

  • Admins: Must review and assign new roles carefully to prevent over-permissioning.
  • Security Teams: Need to validate that data access aligns with confidentiality policies.
  • Data Owners: Should be aware of expanded access to sensitive survey results.
  • Compliance Officers: Must ensure new role assignments meet regulatory data handling requirements.

The Action

  1. Review existing Viva Glint administrative roles and responsibilities.
  2. Identify individuals who require the new 'Survey Owner' role.
  3. Assign the 'Survey Owner' role with the principle of least privilege.
  4. Document 'Survey Owner' assignments and their justification.
  5. Regularly audit 'Survey Owner' permissions and access logs.

Domain: Other · Impact: medium · Workload: Other · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898