Skip to content

Commit 91a09d7

Browse files
Merge pull request #2980 from austinmccollum/patch-3
add Sentinel roles to case features RBAC
2 parents d716b38 + db7edc2 commit 91a09d7

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

unified-secops-platform/cases-overview.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -49,13 +49,13 @@ Case management is available in the Defender portal, and to use it, you must hav
4949

5050
For more information, see [Connect Microsoft Sentinel to the Defender portal](microsoft-sentinel-onboard.md).
5151

52-
Use this table to plan your RBAC of case management:
52+
Use Defender XDR unified RBAC or Microsoft Sentinel roles to grant access to case management features.
5353

54-
| Cases feature | Minimum permissions required in Microsoft Defender XDR Unified RBAC |
55-
|---|---|
56-
| View only</br>- case queue</br>- case details</br>- tasks</br>- comments</br>- case audits | Security operations > Security data basics (read)|
57-
| Create and Manage</br>- cases and case tasks</br>- assign</br>- update status</br>- link and unlink incidents | Security operations > Alerts (manage)|
58-
| Customize case status options | Authorization and setting > Core Security settings (manage)|
54+
| Cases feature | Microsoft Defender XDR Unified RBAC | Microsoft Sentinel role |
55+
|---|---|---|
56+
| View only</br>- case queue</br>- case details</br>- tasks</br>- comments</br>- case audits | Security operations > Security data basics (read)| Microsoft Sentinel Reader |
57+
| Create and Manage</br>- cases and case tasks</br>- assign</br>- update status</br>- link and unlink incidents | Security operations > Alerts (manage)</br>**or**</br>Security operations > Response (manage) | Microsoft Sentinel Responder |
58+
| Customize case status options | Authorization and setting > Core Security settings (manage)| Microsoft Sentinel Contributor |
5959

6060
For more information, see [Microsoft Defender XDR Unified role-based access control (RBAC)](/defender-xdr/manage-rbac).
6161

0 commit comments

Comments
 (0)