Blog Post

Microsoft Sentinel Blog
2 MIN READ

How Granular Delegated Admin Privileges (GDAP) allows Sentinel customers to delegate access

Yossi Basha's avatar
Yossi Basha
Icon for Microsoft rankMicrosoft
Mar 20, 2026

Empowering MSSPs and multi-tenant organizations with simplified delegated access: in Public Preview April 16th 2026

Simplifying Defender SIEM and XDR delegated access As Microsoft Sentinel and Defender converge into a unified experience, organizations face a fundamental challenge: the lack of a scalable, compreh...
Updated Apr 16, 2026
Version 5.0
microsoft sentinel
Patsy's avatar
Patsy
Copper Contributor
Mar 26, 2026

This is great, and timing is spot on. Been trying to solution for this last few weeks. Meaning for existing CSPs, same process to establish the relationship, but GDAP permissions will become available as part of the UBAC in defender?

 

  • Saggie's avatar
    Saggie
    Icon for Microsoft rankMicrosoft
    Apr 08, 2026

    URBAC in defender support for GDAP is planned in the roadmap :) no firm date yet. 

    • thy's avatar
      thy
      Copper Contributor
      Apr 28, 2026

      The integration of Sentinel into the Defender portal and its new controllability via GDAP is welcome news for MSSP vendors. However, with the transition to the Defender portal, MSSPs will likely be required by customers to implement appropriate access controls for the Defender solution as well. Therefore, could you please clarify the schedule for making URBAC compatible with GDAP? MSSPs need to explain the authentication and authorization mechanisms to their customers and determine whether to use Entra B2B or GDAP. Once the authentication and authorization mechanism has been implemented and the migration to the Defender portal is complete, it will be difficult to change the authentication and authorization mechanism. Therefore, we would prefer that the Sentinel portal’s EOL be postponed until GDAP+URBAC is released and MSSPs are able to support it.