Forum Discussion
RVC
Oct 06, 2022Brass Contributor
Protect a specific user group only
I know it sounds odd why you should do the below, but this is all related to understanding the behaviour of setting up MCAS/MDCA. If I want to protect a SaaS app and configure the API (or set up ...
Keith_Fleming
Microsoft
Oct 06, 2022Hi RVC,
By default when you connect app connectors this will light up threat protection alerts for everyone. Some of these policies can be scoped but not all are possible. If you wanted to limit activity ingestion to a specific group, you could utilize a scoped deployment.
Scope your Microsoft Defender for Cloud Apps deployment | Microsoft Learn
For an linline CaaC policy you can specify this with a group in the CA policy or within the session / access policy itself in Defender for Cloud Apps.