Merge pull request #3242 from MicrosoftDocs/main

Publish main to live, 03/24, 11:00 AM IST

Author: aditisrivastava07

CloudAppSecurityDocs/toc.yml

@@ -57,45 +57,8 @@ items:
       href: activity-privacy.md
     - name: Work with IP ranges and tags
       href: ip-tags.md
-- name: Cloud app discovery
-  items:
-  - name: Overview
-    displayName: cloud discovery, best practices
-    href: set-up-cloud-discovery.md
-  - name: Govern discovered apps
-    href: governance-discovery.md
-  - name: Enrich cloud discovery
-    href: cloud-discovery-aad-enrichment.md
-  - name: Anonymize cloud discovery data
-    href: cloud-discovery-anonymizer.md
-  - name: Configure cloud discovery
+  - name: Connect apps for visibility and protection
     items:
-    - name: Find your cloud app and calculate risk scores
-      href: risk-score.md
-    - name: Add custom apps to cloud discovery
-      href: cloud-discovery-custom-apps.md
-    - name: Attest your app
-      href: attest-your-app.md
-    - name: Collect logs
-      items:
-      - name: Configure automatic log upload for continuous reports
-        href: discovery-docker.md
-      - name: Podman on Linux on-premises
-        href: discovery-linux-podman.md
-      - name: Docker on Linux on-premises
-        href: discovery-docker-ubuntu.md
-      - name: Docker on Linux in Azure
-        href: discovery-docker-ubuntu-azure.md
-      - name: Docker on Azure Kubernetes Service
-        href: discovery-kubernetes.md
-      - name: Docker on Windows on-premises
-        href: discovery-docker-windows.md
-      - name: Advanced log collector management
-        href: log-collector-advanced-management.md
-      - name: Use the custom log parser
-        href: custom-log-parser.md
-    - name: Connect apps for visibility and protection
-      items:
       - name: Overview
         displayName: connect apps
         href: enable-instant-visibility-protection-and-governance-actions-for-your-apps.md
@@ -157,6 +120,43 @@ items:
         href: protect-zoom.md
       - name: Troubleshooting API connectors using error messages
         href: troubleshooting-api-connectors-using-error-messages.md
+- name: Cloud app discovery
+  items:
+  - name: Overview
+    displayName: cloud discovery, best practices
+    href: set-up-cloud-discovery.md
+  - name: Govern discovered apps
+    href: governance-discovery.md
+  - name: Enrich cloud discovery
+    href: cloud-discovery-aad-enrichment.md
+  - name: Anonymize cloud discovery data
+    href: cloud-discovery-anonymizer.md
+  - name: Configure cloud discovery
+    items:
+    - name: Find your cloud app and calculate risk scores
+      href: risk-score.md
+    - name: Add custom apps to cloud discovery
+      href: cloud-discovery-custom-apps.md
+    - name: Attest your app
+      href: attest-your-app.md
+    - name: Collect logs
+      items:
+      - name: Configure automatic log upload for continuous reports
+        href: discovery-docker.md
+      - name: Podman on Linux on-premises
+        href: discovery-linux-podman.md
+      - name: Docker on Linux on-premises
+        href: discovery-docker-ubuntu.md
+      - name: Docker on Linux in Azure
+        href: discovery-docker-ubuntu-azure.md
+      - name: Docker on Azure Kubernetes Service
+        href: discovery-kubernetes.md
+      - name: Docker on Windows on-premises
+        href: discovery-docker-windows.md
+      - name: Advanced log collector management
+        href: log-collector-advanced-management.md
+      - name: Use the custom log parser
+        href: custom-log-parser.md
     - name: Integrate with Microsoft Defender for Endpoint
       items:
       - name: Overview

exposure-management/prerequisites.md

@@ -63,6 +63,16 @@ For full access, users need one of the following Microsoft Entra ID roles:
 - **Global Reader** (read permissions)
 - **Security Reader** (read permissions)
 
+- **Service Support** Administrator (read permissions)
+
+- **User Administrator** (read permissions)
+
+- **Helpdesk Administrator** (read permissions)
+
+- **Exchange Administrator** (read and write permissions)
+
+- **SharePoint Administrator** (read and write permissions)
+
 Permission levels are summarized in the table.
 
 | Action| Global Admin |Global Reader | Security Admin  | Security Operator | Security Reader |