Event details

During Microsoft Secure you learned about the latest innovations around Microsoft's SIEM and XDR solution. Join this Ask Microsoft Anything (AMA) session to get your questions about Microsoft Sentine...
Trevor_Rusher
Updated Dec 27, 2024
siem
Tech Accelerator
xdr
KoprowskiT's avatar
KoprowskiT
MVP
Apr 13, 2023
Azure Global Admin != M365 Global Admin != Defender Admin - even if you have GA roles, that role is not super powerful - cannot execute many things and actions in Microsoft Purview Portal and Microsoft Defender Portal. You have to apply proper permission for products and subproducts inside M365.
Ed Fisher's avatar
Ed Fisher
Icon for Microsoft rankMicrosoft
Apr 13, 2023
Tobias is quite right, but just to add a little more specificity to this, to enable the Office 365 Threat Intelligence connection, you need to have Security Administrator permissions.
  • bobbobcom's avatar
    bobbobcom
    Copper Contributor
    Apr 13, 2023
    thanks Ed, I think the catch was he needs Sec Admin in the Compliance portal, not AAD.