Forum Discussion
Tenant AllowBlockList Manager is not mapped in new Microsoft 365 Defender RBAC model
After adapting the New M365D RBAC model, the analyst are unable to block the sender or malicious domain, file and URL from explorer menu because Microsoft not mapped the Tenant AllowBlockList Manager...
Hi zubairrahimsoc,
Have you found a workaround for the Tenant AllowBlockList Manager role?
A workaround is to assign the Security Administrator role but it beats the purpose of having people with less permissions and roles.
- I have the same problem, is there any update to this?
Hi TheRaulMillan,
Are you trying this with a native account or with a B2B (guest account)?
You can also have a look at this response: Re: Microsoft Defender XDR Unified RBAC | Tenant Allow/Block List, entry addition error - Microsoft Community Hub
- I found this solution to the sync problem.
https://sekureco42.ch/posts/microsoft-defender-for-office-365-least-privileges/
I'm not sure if it works, I'm just testing this out right now, but need to wait for the permissions to update.
