Knowledge Base

Microsoft Sentinel Transitioning to Defender Portal: Advance Notice

This message is to give you early notice of an important change coming from Microsoft that will affect how our MDR service is delivered going forward. We want to make sure you are informed well in advance. 

What Microsoft is changing

 

From 1 April 2027, Microsoft is introducing two mandatory changes across its security platform:

  • The Microsoft Sentinel experience will transition fully to the Microsoft Defender portal.

  • Unified RBAC (Role-Based Access Control) will become the standard model for managing access and permissions. In simple terms, this replaces the separate, tool-specific permission settings previously used across Sentinel and Defender with a single, unified access management framework.

For full details on the timeline and scope, please refer to the official Microsoft announcement: UPDATE: New timeline for transitioning Sentinel experience to Defender portal.

 

What we are doing

We are actively working on all changes required to ensure continued, uninterrupted delivery of the MDR service under the new model. This includes adapting our internal processes, tooling, and access configurations ahead of the April 2027 deadline.

 

What this means for your service

Our SOC team will operate from the Microsoft Defender portal rather than the standalone Sentinel experience. This brings improvements to service delivery - including more unified security operations, stronger access governance, and improved cross-platform visibility.

 

What this means for you right now

At this stage, no action is required on your end. In due course, our technical team will contact you directly to align on the specific steps and requirements relevant to your environment. We will guide you through everything needed.