Threat and Vulnerability Management
On November 2, 2021, we announced the public preview of Threat and Vulnerability management on Android and iOS. For more information, see the techcommunity post here.
Upcoming permission changes for Microsoft Defender for Endpoint running Android 11 or later (Nov 2021)
Release Build: 1.0.3501.0301 Release month: Nov 2021 Microsoft Defender for Endpoint has released this update required by Google to upgrade to Android API 30. This change will prompt users seeking access to new storage permission, for devices running Android 11 or later. Users will need to accept this new storage permission once they update Defender app with the release build 1.0.3501.0301 or later. This will ensure that Defender for Endpoint’s app security feature to function without any disruption. For more information, review the following sections.
How will this affect your organization: These changes will take affect, if you are using Microsoft Defender for Endpoint on devices running Android 11 or later and updated Defender for Endpoint to release build 1.0.3501.0301 or later.
Note
The new storage permissions cannot be configured by admin to ‘Auto Approve’ through Microsoft Endpoint Manager. User will need to take action to provide access to this permission.
- User experience: Users will receive a notification indicating a missing permission for app security. If the user denies this permission, the ‘App security’ functionality will be turned off on the device. If user doesn’t accept or deny permission, they will continue to receive the prompt when unlocking their device or opening the app, until it has been approved.
Note
If your organization is previewing ‘Tamper protection’ feature and if the new storage permissions are not granted by the user within 7 days of updating to the latest version, the user might lose access to corporate resources.
What you need to do to prepare:
Notify your users and helpdesk (as applicable) that users will need to accept the new permissions when prompted after they have updated Defender for Endpoint to build 1.0.3501.0301 or later version. To accept the permissions, users should:
- Tap on the Defender for Endpoint in-app notification or open the Defender for Endpoint app. Users will see a screen that lists the permissions needed. A green check mark will be missing next to the Storage permission.
- Tap Begin.
- Tap the toggle for Allow access to manage all files.
- The device is now protected.
Note
This permission allows Microsoft Defender for Endpoint to access storage on user’s device, which helps detect and remove malicious and unwanted apps. Microsoft Defender for Endpoint accesses/scans Android app package file (.apk) only. On devices with a Work Profile, Defender for Endpoint only scans work-related files.