File tree Expand file tree Collapse file tree 1 file changed +1
-1
lines changed Expand file tree Collapse file tree 1 file changed +1
-1
lines changed Original file line number Diff line number Diff line change @@ -154,7 +154,7 @@ Use this table to learn about the permissions assigned by default for each workl
154154
155155| Microsoft Entra role| Microsoft Defender XDR Unified RBAC assigned permissions for all workloads| Microsoft Defender XDR Unified RBAC assigned permissions – workload specific|
156156| ---| -| ---|
157- |Global administrator|Security operations \ Security data \ Security data basics (read)</br>Security operations \ Security data \ Alerts (manage) </br>Security operations \ Security data \ Response (manage)</br>Security posture \ Posture management \ Secure Score (read) </br> Security posture \ Posture management \ Secure Score (manage)</br>Authorization and settings \ Authorization (Read and manage)</br>Authorization and settings \ Security settings (All permissions)</br>Authorization and settings \ System settings (Read and manage) |_**Defender for Endpoint and Defender Vulnerability Management permissions only permissions**_ </br>Security operations \ Basic live response (manage)</br>Security operations \ Advanced live response (manage) </br> Security operations \ Security data \ File collection (manage) </br>Security posture \ Posture management \ Vulnerability management (read)</br>Security posture \ Posture management \ Exception handling (manage)</br>Security posture \ Posture management \ Remediation handling (manage)</br>Security posture \ Posture management \ Application handling (manage)</br>Security posture \ Posture management \ Security baseline assessment (manage)</br></br> _**Defender for Office only permissions**_ </br> Security operations \ Security data \ Email quarantine (manage)</br>Security operations \ Security data \ Email advanced actions (manage)</br>Security operations \ Raw data (Email & collaboration) \ Email & collaboration metadata (read)|
157+ |Global administrator|Security operations \ Security data \ Security data basics (read)</br>Security operations \ Security data \ Alerts (manage) </br>Security operations \ Security data \ Response (manage)</br>Security posture \ Posture management \ Exposure Management (read)</br>Security posture \ Posture management \ Exposure Management (manage)</br>Authorization and settings \ Authorization (Read and manage)</br>Authorization and settings \ Security settings (All permissions)</br>Authorization and settings \ System settings (Read and manage) |_**Defender for Endpoint and Defender Vulnerability Management permissions only permissions**_ </br>Security operations \ Basic live response (manage)</br>Security operations \ Advanced live response (manage) </br> Security operations \ Security data \ File collection (manage) </br>Security posture \ Posture management \ Vulnerability management (read)</br>Security posture \ Posture management \ Exception handling (manage)</br>Security posture \ Posture management \ Remediation handling (manage)</br>Security posture \ Posture management \ Application handling (manage)</br>Security posture \ Posture management \ Security baseline assessment (manage)</br></br> _**Defender for Office only permissions**_ </br> Security operations \ Security data \ Email quarantine (manage)</br>Security operations \ Security data \ Email advanced actions (manage)</br>Security operations \ Raw data (Email & collaboration) \ Email & collaboration metadata (read)|
158158| Security administrator| Same as Global administrator| Same as Global administrator|
159159| Global reader| Security operations \ Security data \ Security data basics (read)</br >Security posture \ Posture management \ Secure Score (read) </br >| _ ** Defender for Endpoint and Defender Vulnerability Management permissions only permissions** _ </br >Security posture \ Posture management \ Vulnerability management (read)</br ></br > _ ** Defender for Office only permissions** _ </br > Security operations \ Security data \ Response (manage)</br >Security operations \ Raw data (Email & collaboration) \ Email & collaboration metadata (read)</br >Authorization and settings \ Authorization (read) </br ></br >_ ** Defender for Office and Defender for Identity only permissions** _ </br >Authorization and settings \ Security settings \ Core security settings (read)</br >Authorization and settings \ System settings (read)|
160160| Security reader| Security operations \ Security data \ Security data basics (read)</br >Security posture \ Posture management \ Secure Score (read) </br >| _ ** Defender for Endpoint and Defender Vulnerability Management permissions only permissions** _ </br >Security posture \ Posture management \ Vulnerability management (read)</br ></br > _ ** Defender for Office only permissions** _ </br > Security operations \ Security data \ Response (manage)</br >Security operations \ Raw data (Email & collaboration) \ Email & collaboration metadata (read) </br ></br >_ ** Defender for Office and Defender for Identity only permissions** _ </br >Authorization and settings \ Security settings \ Core security settings (read)</br >Authorization and settings \ System settings (read)|
You can’t perform that action at this time.
0 commit comments