Message Center
Updated August 11, 2026: We have updated the timeline. Thank you for your patience.
What and why
Apple is introducing a change in macOS Golden Gate (version 27), currently expected to reach general availability in September 2026. With this change, users can disable Accessibility permissions even when those permissions are deployed and managed through Mobile Device Management (MDM).
Microsoft Purview Endpoint Data Loss Prevention (Endpoint DLP) relies on Accessibility permissions to accurately identify the websites, applications, and files involved in user activities. To maintain protection and monitoring capabilities, we are updating Endpoint DLP to accommodate this platform change.
Rollout schedule
Impact on your organization
Who is affected
Platforms and services
What will happen
On devices where Accessibility permissions are turned off, Safari, Chrome, and Firefox will be treated as unallowed browsers. Endpoint DLP will apply enforcement to upload activities regardless of URL. This may increase block or block with override notifications and may result in additional false-positive events and alerts.
In Microsoft Purview, affected devices will display:
Users on affected devices will receive a notification explaining the impact. Organizations can customize this notification through their MDM configuration by updating the plist file.
Microsoft Edge is not affected by this change and will continue to function as expected.
Action required and recommendations
To prepare for this change:
Learn more
Compliance considerations
| Question | Answer |
| Does this change modify, interrupt, or disable Purview-related capabilities? | Yes. If Accessibility permissions are turned off on macOS devices, Microsoft Purview Endpoint DLP may lose visibility into browser activity for Safari, Chrome, and Firefox, which changes how DLP enforcement and monitoring function on those devices. |
| Does this change alter how admins monitor, report on, or demonstrate compliance activities? | Yes. Administrators will need to monitor affected devices using the Device Onboarding page, where device status indicators such as Configuration status and Accessibility status provide visibility into devices impacted by this change. |
| Does this change include an admin control? | Yes. Organizations can deploy or validate the required MDM plist configuration to enable Accessibility permissions on managed macOS devices. |
| Does this change allow users to enable or disable the feature themselves? | Yes. In macOS Golden Gate (version 27), users can disable Accessibility permissions even when those permissions were deployed and managed through MDM. |
What and why
Apple is introducing a change in macOS Golden Gate (version 27), currently expected to reach general availability in September 2026. With this change, users can disable Accessibility permissions even when those permissions are deployed and managed through Mobile Device Management (MDM).
Microsoft Purview Endpoint Data Loss Prevention (Endpoint DLP) relies on Accessibility permissions to accurately identify the websites, applications, and files involved in user activities. To maintain protection and monitoring capabilities, we are updating Endpoint DLP to accommodate this platform change.
Rollout schedule
Impact on your organization
Who is affected
Platforms and services
What will happen
On devices where Accessibility permissions are turned off, Safari, Chrome, and Firefox will be treated as unallowed browsers. Endpoint DLP will apply enforcement to upload activities regardless of URL. This may increase block or block with override notifications and may result in additional false-positive events and alerts.
In Microsoft Purview, affected devices will display:
Users on affected devices will receive a notification explaining the impact. Organizations can customize this notification through their MDM configuration by updating the plist file.
Microsoft Edge is not affected by this change and will continue to function as expected.
Action required and recommendations
To prepare for this change:
Learn more
Compliance considerations
| Question | Answer |
| Does this change modify, interrupt, or disable Purview-related capabilities? | Yes. If Accessibility permissions are turned off on macOS devices, Microsoft Purview Endpoint DLP may lose visibility into browser activity for Safari, Chrome, and Firefox, which changes how DLP enforcement and monitoring function on those devices. |
| Does this change alter how admins monitor, report on, or demonstrate compliance activities? | Yes. Administrators will need to monitor affected devices using the Device Onboarding page, where device status indicators such as Configuration status and Accessibility status provide visibility into devices impacted by this change. |
| Does this change include an admin control? | Yes. Organizations can deploy or validate the required MDM plist configuration to enable Accessibility permissions on managed macOS devices. |
| Does this change allow users to enable or disable the feature themselves? | Yes. In macOS Golden Gate (version 27), users can disable Accessibility permissions even when those permissions were deployed and managed through MDM. |