Microsoft Intune: Additional granular RBAC controls to manage Antivirus, Firewall, BitLocker, and Endpoint Detection and Response endpoint security workloads

Choose your reading

The role changes the reading angle, not the facts, date or level of evidence.

Reading for a salesperson

Who is affected: The audience described by the Microsoft update is represented by: Microsoft Intune: Additional granular RBAC controls to manage Antivirus, Firewall, BitLocker, and Endpoint Detection and Response endpoint security workloads Expanded granular RBAC controls to manage Endpoint Security workloads. The ‘Security baselines’ permission previously included all security policies and now all security workloads have their own permission set GA date: November CY2025 In development General Availability Worldwide (Standard Multi-Tenant) GCC GCC High DoD Microsoft Intune And

Why it matters: The change matters because the official source describes: Microsoft Intune: Additional granular RBAC controls to manage Antivirus, Firewall, BitLocker, and Endpoint Detection and Response endpoint security workloads Expanded granular RBAC controls to manage Endpoint Security workloads. The ‘Security baselines’ permission previously included all security policies and now all security workloads have their own permission set GA date: November CY2025 In development General Availability Worldwide (Standard Multi-Tenant) GCC GCC High DoD Microsoft Intune And

Urgency: Monitor

Next action: Review affected accounts with the customer using the official announcement.

Commercial opportunities

• Use the verified change to open a scoped customer conversation.

Technical actions

• Assess whether the documented change intersects the customer's current stack.

Questions to ask the customer

• Does this documented change affect a product or workload in scope?

Risks and objections

• The official source does not establish facts beyond the quoted material.

Points to confirm

• The effective date is unknown and must be confirmed before scheduling action.