Managing risky 3rd party app permissions with Microsoft’s CASB

kimkischel Thanks for the overview above. You say that "To minimize the impact to your organization, these alerts can be configured with governance actions to automatically revoke the permissions of an app that is considered risky." Since it is an alert, can you please clarify if this means [1] that the administrator on reviewing the alert can revoke permissions, or [2] MCAS will proactively revoke permissions without admin intervention on the alert being generated.