scoped permissions

The scoped permissions tag covers Microsoft Intune guidance for assessing and preparing a tenant-wide permissions change. Tagged discussions focus on running the Permissions Assessment Report, comparing current merged permissions with the scoped result, and reconciling reductions with the organization’s intended role design. They address role assignments, scope tags, RBAC overgrant risk, and least-privilege administration across distributed IT teams. The change is described as an irreversible opt-in public preview, so administrators are advised to correct assignments and rerun the assessment before enabling it. The content also notes that scoped permissions are expected to become the default at general availability, although Microsoft has not published a general-availability or forced-change date.