Skip to content

Commit 0ed8fd9

Browse files
committed
xdr vs non-xdr services
1 parent e17cbf0 commit 0ed8fd9

File tree

2 files changed

+8
-7
lines changed

2 files changed

+8
-7
lines changed

defender-xdr/advanced-hunting-microsoft-defender.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -34,9 +34,10 @@ Querying from a single portal across different data sets makes hunting more effi
3434
## How to access
3535

3636
### Required roles and permissions
37-
To query across Microsoft Sentinel and Microsoft Defender XDR data in the unified advanced hunting page, you must have access to Microsoft Defender XDR advanced hunting (see [Required roles and permissions](custom-roles.md#required-roles-and-permissions)) and at least Microsoft Sentinel Reader (see [Microsoft Sentinel-specific roles](/azure/sentinel/roles#microsoft-sentinel-specific-roles)).
3837

39-
In the unified portal, you can query any data in any workload that you can currently access based on the roles and permissions you have.
38+
You can query data in any workload that you can currently access based on your roles and permissions.
39+
40+
To query across Microsoft Sentinel and Microsoft Defender XDR data in the unified advanced hunting page, you'll also need at least the Microsoft Sentinel Reader role. For more information, see [Microsoft Sentinel-specific roles](/azure/sentinel/roles#microsoft-sentinel-specific-roles).
4041

4142
### Connect a workspace
4243

defender-xdr/custom-roles.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,6 @@ Microsoft recommends that you use roles with the fewest permissions. This helps
2828

2929
**Applies to:**
3030

31-
- Microsoft Defender for Cloud
3231
- Microsoft Defender for Cloud Apps
3332
- Microsoft Defender for Endpoint
3433
- Microsoft Defender for Identity
@@ -66,12 +65,13 @@ For Defender for Endpoint and Defender for Office, use custom roles as follows:
6665

6766
For other service information, see:
6867

69-
- [Roles and permissions in Defender for Cloud](/azure/defender-for-cloud/permissions)
7068
- [Configure access for Defender for Cloud Apps](/defender-cloud-apps/manage-admins)
7169
- [Roles and permissions in Defender for Identity](/defender-for-identity/role-groups)
7270

7371
## Related content
7472

75-
- [RBAC roles](/defender-office-365/migrate-to-defender-for-office-365-onboard#rbac-roles)
76-
- [Common questions about Defender for Cloud permissions](/azure/defender-for-cloud/faq-permissions)
77-
- [Create and manage roles for role-based access control in Defender for Endpoint](/defender-endpoint/user-roles)
73+
For more information about other Microsoft Defender portal services, see:
74+
75+
- [Microsoft Defender for Cloud user roles and permissions](/azure/defender-for-cloud/permissions)
76+
- [Roles and permissions in Microsoft Sentinel](/azure/sentinel/roles)
77+
- [Microsoft Defender for IoT user management](/azure/defender-for-iot/organizations/manage-users-overview)

0 commit comments

Comments
 (0)