Security settings management is available for multi-tenant environments in Microsoft Defender XDR

A few months ago we launched the device Manage security settings Within Microsoft Defender XDR. This experience allows security administrators to configure Microsoft Defender for Endpoint security settings for devices on all platforms (including Windows, Linux, and Mac) without leaving the Defender portal. The streamlined portal experience breaks down the walls between security and IT teams by providing a shared view for both, making it easier for security administrators to strengthen the security posture of their devices.

Security administrators can now achieve greater efficiency through simplified security settings management that supports multi-tenancy environments common to large enterprises and managed service security providers (MSSPs). Multi-tenant view of the Defender XDR portal (Multi-Tenant Management in Microsoft Defender XDR – Microsoft Defender XDR | microsoft run) provides security administrators with a unified view of all security policies across the entire organization, including policies from all tenants, without the need to switch portals. To access this page, go to: Endpoint > Configuration Management > Endpoint Security Policy.

Additionally, security administrators can: Create, Editor delete Manage policies centrally and within the context of a specific tenant with a unified, aggregated view.

On the Endpoint Security Policy page, security administrators can: find Use the search feature to view specific policies for all tenants.

To manage security settings for multiple tenants in the multi-tenant view of the Defender Manage Microsoft Defender settings on devices not enrolled in Intune using Intune | Micro…). This includes the following role-based access control requirements:

• For Microsoft Defender, use the Security Administrator role (or a custom role with security configuration management permissions scoped to all devices).
• For Microsoft Intune, use the Endpoint Security Administrator role.

Additionally, devices in each Defender tenant must be associated with a corresponding Entra tenant.

This environment does not currently support Microsoft Defender for Business tenants.

For more information and instructions, visit: Endpoint security policies in multi-tenant management – Microsoft Defender XDR | microsoft run