Forum Discussion

Anonymous

Dec 06, 2017

Solved

Access control?

Is there a way to restrict who can access ATP? I am just onboarding and I've found any user can access it - which could be a bit of a problem.

Astrid McClean
Dec 11, 2017
Azure ATP creates three AAD groups which you can use to provide access to each Azure ATP workspace you create: They are named Azure ATP <WorkspaceName> Administrators; Azure ATP <WorkspaceName> Users and Azure ATP <WorkspaceName> Viewers. Details on what each group can access can be found here: https://docs.microsoft.com/en-us/advanced-threat-analytics/ata-role-groups

Adding users to these AAD groups will give them access to an individual workspace (they will need to use the full workspace URL).

Only Global Administrators and Security administrators can access the Workspace management portal at https://portal.atp.azure.com

Anonymous

Dec 11, 2017

Thanks. Turned out the users I asked to try it was Global admins. I've tested with someone else and they could not get access.

Astrid McClean

Former Employee

Dec 11, 2017

Azure ATP creates three AAD groups which you can use to provide access to each Azure ATP workspace you create: They are named Azure ATP <WorkspaceName> Administrators; Azure ATP <WorkspaceName> Users and Azure ATP <WorkspaceName> Viewers. Details on what each group can access can be found here: https://docs.microsoft.com/en-us/advanced-threat-analytics/ata-role-groups

Adding users to these AAD groups will give them access to an individual workspace (they will need to use the full workspace URL).

Only Global Administrators and Security administrators can access the Workspace management portal at https://portal.atp.azure.com