(Updated) Plan for Change: Removing instance-level reports for Endpoint Privilege Management

Updated July 17, 2026: We have extended the timeline to August 31, 2026. Thank you for your patience. 

Starting on August 31, 2026 (previously late June 2026), or soon after, we are making a change to reporting in Endpoint Privilege Management (EPM) within Microsoft Intune. As part of ongoing improvements to reporting performance and scalability, we are transitioning from instance-level reporting to aggregated reporting. As part of this change, the Elevation report and Managed elevations report (Endpoint security > Endpoint Privilege Management > Reports tab) will no longer be available.

[How this will affect your organization:]

If you are using the Elevation report or Managed elevations report, these reports will no longer be available in the Intune admin center. Instead, use the aggregated reporting experiences such as elevation reports grouped by application, publisher, or user, to review elevation activity. Aggregated reports provide the same information but present the data in a summarized format with drilldown capabilities. Note that the most detailed view available will be at the day level rather than minute-level timestamps.

[What you need to do to prepare:]

Update your IT documentation as needed. We recommend reviewing any current reliance on instance-level reporting and becoming familiar with the available aggregated reports for ongoing monitoring and analysis. To learn more about the aggregated reports available, review: Reports for Endpoint Privilege Management