How to enforce Security Defaults in Microsoft 365

To follow this guide you will need:

  • The correct role: the Security Administrator, Conditional Access Administrator, or Global Administrator roles are needed to perform these steps.

Step 1

Navigate to the Azure Active Directory blade in the Azure Active Directory admin center.

Step 2

From the side menu, select Properties:

M365: Azure AD, Properties

Step 3

At the bottom of the page, select "Manage Security Defaults":


Step 4

A side menu to "Enable Security Defaults" should appear with a single control to enable Security Defaults. Slide it over to Yes.