Skip to content

Commit 59c6168

Browse files
authored
Change the permissions in line 30
A user can only assign a policy with Owner permissions: https://learn.microsoft.com/en-us/azure/governance/policy/overview#azure-rbac-permissions-in-azure-policy In the current version we say that Contributor can as well which is false
1 parent 90d4c01 commit 59c6168

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

articles/defender-for-cloud/permissions.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ The following table displays roles and allowed actions in Defender for Cloud.
2727
| **Action** | [Security Reader](../role-based-access-control/built-in-roles.md#security-reader) / <br> [Reader](../role-based-access-control/built-in-roles.md#reader) | [Security Admin](../role-based-access-control/built-in-roles.md#security-admin) | [Contributor](../role-based-access-control/built-in-roles.md#contributor) / [Owner](../role-based-access-control/built-in-roles.md#owner) | [Contributor](../role-based-access-control/built-in-roles.md#contributor) | [Owner](../role-based-access-control/built-in-roles.md#owner) |
2828
|:-|:-:|:-:|:-:|:-:|:-:|
2929
| | | | **(Resource group level)** | **(Subscription level)** | **(Subscription level)** |
30-
| Add/assign initiatives (including) regulatory compliance standards) | - | - | - | ||
30+
| Add/assign initiatives (including) regulatory compliance standards) | - | - | - | - ||
3131
| Edit security policy | - || - |||
3232
| Enable / disable Microsoft Defender plans | - || - |||
3333
| Dismiss alerts | - || - |||

0 commit comments

Comments
 (0)