MC1485169 - Dynamics 365 Contact Center - Use role-based enforcement for recording and transcription downloads

Microsoft 365 Message Center announcement MC1485169.

MS Message Center's Summary

Microsoft is introducing role based security enforcement for recording and transcription downloads within Dynamics 365 Contact Center starting October thirty first twenty twenty six. This update allows administrators to assign new Dataverse security roles that restrict data downloads while preserving playback access. Organisations should review current security assignments to determine if this new control supports their internal data governance requirements.

Administrator impact
No direct administrator action is required.
End user impact
Selected users may lose the ability to download recordings and transcripts depending on assigned security roles.
Importance
3/10: This is a standard administrative feature update that provides optional security controls without disrupting default operations.
Message Center ID
MC1485169
Category
stay Informed
Severity
normal
Services
Dynamics 365 Apps
Published
2026-10-02
Last updated
2026-10-02
Expires
2026-12-01

We are announcing the ability to use role-based enforcement for recording and transcription downloads in Dynamics 365 Contact Center. This feature will reach general availability on October 31, 2026. How does this affect me? This feature helps organizations better protect sensitive customer communications by separating permissions to view recordings and transcripts from permissions to download them. Admins can assign new Dataverse security roles to prevent selected users from downloading recordings or transcripts while still allowing them to view and play back content as permitted by existing access. The two new Dataverse security roles that will be available are: Deny Recording Download Deny Transcription Download When either role is assigned to a user: The user can continue to view and play back recordings and transcripts as permitted by existing access. The user is blocked from downloading the corresponding artifact. Enforcement of these models is applied server-side across the Dynamics 365 Contact Center UI, public and internal APIs, and direct download URLs or integrations. Download requests will also be denied regardless of how they are initiated. Access control is driven entirely by Dataverse role assignment. The deny roles override implicit download behavior without affecting recording, transcription, or playback functionality. These controls help reduce the risk of unauthorized data export, support compliance and data governance requirements, and allow organizations to maintain operational visibility without allowing data removal. What action do I need to take? This message is for awareness, and no action is required.