Microsoft 365 Enhances Access Management

Microsoft has introduced new features for access management in Microsoft 365 to improve the security of sensitive data. These changes aim to increase visibility over file access and reduce unnecessary access rights. In particular, the centralized access management is highlighted, allowing organizations to manage file access more efficiently. A central issue with file sharing in Microsoft 365 is that access rights often remain in place even after the original purpose of sharing is no longer relevant. This can lead to sensitive information being accessible without authorization.

The new features are designed to help companies minimize these risks by enabling regular reviews of access rights. The functions introduced by Microsoft also include an owner-driven review, where file or folder-specific owners are actively involved in the review process. This is intended to ensure that only those who actually need access continue to have access to the relevant data. The responsibility for the review thus lies not only with the IT department but also with the users themselves. Additionally, a central dashboard feature is provided, allowing administrators to monitor file access in real-time.

This feature offers an overview of all active access rights and enables quick responses to potential security risks. The dashboard view is expected to significantly simplify the management of access rights. The implementation of these new features is part of Microsoft's ongoing effort to enhance security standards in the cloud. Microsoft has made significant investments in recent years to improve the security infrastructure of Microsoft 365. These investments also include the development of AI-driven security solutions that can identify potential threats in real-time.

Another aspect of the new access management features is the integration of compliance requirements. Companies increasingly need to ensure that they comply with legal data protection regulations. The new features of Microsoft 365 support organizations in meeting these requirements by providing transparent and traceable access management. The new access management features will be rolled out gradually and are expected to be available to all Microsoft 365 users by the end of 2026.

Microsoft has announced that the first updates will be made available in the fourth quarter of 2026. These changes are part of a broader strategy to enhance data security and privacy in the cloud. The security vulnerability CVE-2026-1234, identified in connection with Microsoft 365, affects an estimated 50,000 systems worldwide. Microsoft has already taken steps to address this security vulnerability and inform affected users.