Forum Discussion
Defender XDR Unified RBAC - Cannot manage incidents
Thank you Steve for this update.
Defender for Cloud Apps not yet supported by Unified RBAC. As you can see when creating a new role, the list of available data sources in the assignment stage does not include Defender for Cloud Apps as an option. You can continue granting access to Defender for Cloud Apps data and experiences using the individual workload RBAC (in parallel to using Unified RBAC with the rest of the workloads).
I just realized that I CAN manage incidents where the detection source is MDO. I CANNOT manage incidents where the detection source is Microsoft Defender for Cloud Apps. Is this not possible currently with the Unified RBAC?
MicrosoftThank you Steve for this update.
Defender for Cloud Apps not yet supported by Unified RBAC. As you can see when creating a new role, the list of available data sources in the assignment stage does not include Defender for Cloud Apps as an option. You can continue granting access to Defender for Cloud Apps data and experiences using the individual workload RBAC (in parallel to using Unified RBAC with the rest of the workloads).
- Hi Gadi,
Thank you. Is Defender for Cloud Apps support on the Unified RBAC roadmap? If so, is there an anticipated timeframe?- Gadi_Palatchi_MSFTHi Steve,
We continue to improve and to expand the product so it will cover more and more areas as well as meet end-users' needs as good as possible.
Please stay tuned and continue to follow our releases for new capabilities in the future.