Looking at M365 Defender Portal specifically, would Microsoft ever take any action to change, update or modify the UAC on M365 Defender portal, or any settings in the portal, unilaterally? In the event a MS Engineer enters our tenant, for whatever reason: Do they have by default/can get Admin (Sec/Global level) permissions to our tenant, while working within it? Do MS Engineers have/can get access to the Live Response feature in M365 Defender? Would they use it in any case? If Microsoft Engineers can get access to/use Live Response – are there any additional features available to Microsoft Engineers beyond user accessible features when in Live Response?