Skip to content

Commit 22c1e1d

Browse files
committed
Update streaming-api-storage.md
1 parent 52ef32a commit 22c1e1d

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

defender-xdr/streaming-api-storage.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -32,27 +32,27 @@ ms.date: 06/21/2024
3232

3333
1. Create a [Storage account](/azure/storage/common/storage-account-overview) in your tenant.
3434

35-
2. Log in to your [Azure tenant](https://ms.portal.azure.com/), go to **Subscriptions > Your subscription > Resource Providers > Register to Microsoft.Insights**.
35+
2. Log in to your [Azure tenant](https://ms.portal.azure.com/), go to **Subscriptions** > **Your subscription** > **Resource Providers** > **Register to Microsoft.Insights**.
3636

3737
### Add contributor permissions
3838

39-
Once the Storage account is created, you'll need to:
39+
Once the storage account is created, you'll need to define the user who is signing in as a contributor.
4040

41-
1. Define the user who is logging into Microsoft Defender XDR as Contributor.
41+
1. Go to **Storage Account** > **Access control (IAM)**, and then select **Add**.
4242

43-
Go to **Storage Account > Access control (IAM) > Add** and verify under **Role assignments**.
43+
2. Verify the user is listed under **Role assignments**.
4444

4545
## Enable raw data streaming
4646

47-
1. Log in to <a href="https://go.microsoft.com/fwlink/p/?linkid=2077139" target="_blank">Microsoft Defender XDR</a> as a ***Security Administrator*** at a minimum.
47+
1. Go to the [Microsoft Defender portal](https://go.microsoft.com/fwlink/p/?linkid=2077139) and sign in using an account with at least Security Administrator permissions.
4848

4949
> [!IMPORTANT]
5050
> Microsoft recommends that you use roles with the fewest permissions. Using lower permissioned accounts helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.
5151
5252
> [!NOTE]
53-
> When using the Streaming API to an Azure Storage account, ensure the option "Allow trusted Microsoft services to access this storage account" is enabled in the storage account settings to allow for data to be streamed from Microsoft Defender for Endpoint.
53+
> When using the Streaming API to an Azure Storage account, ensure the option `Allow trusted Microsoft services to access this storage account` is enabled in the storage account settings to allow for data to be streamed from Microsoft Defender for Endpoint.
5454
55-
2. Go to **Settings** > **Microsoft Defender XDR** > **Streaming API**. To go directly to the **Streaming API** page, use <https://security.microsoft.com/settings/mtp_settings/raw_data_export>.
55+
2. Go to **Settings** > **Microsoft Defender XDR** > **Streaming API**. To go directly to the **Streaming API** page, use [https://security.microsoft.com/settings/mtp_settings/raw_data_export](https://security.microsoft.com/settings/mtp_settings/raw_data_export).
5656

5757
3. Select **Add**.
5858

0 commit comments

Comments
 (0)