Microsoft Defender for Identity: Native "response" actions

[Magenta365]

Hi all,

I've found the following Feature on the Roadmap which is acutally GA:

Microsoft Defender for Identity: Native "response" actions

https://www.microsoft.com/de-de/microsoft-365/roadmap?filters=&searchterms=82077

Unfortunately I cannot find any Documentation etc. how to configure this / get use of this Feature. I would really like to have the Option to automatically disable a AD User when AATP discover some really weird things on the Account.

Hope you can help me out.

Regards,

Pi

[#2 · Accepted solution]

@Magenta365 

The feature is not GA just yet. It will be in a couple of weeks.

We'll update the roadmap to reflect that. @Ricky Simpson 

For now, you can go ahead and configure the gMSA with the proper permissions to take those actions, as described in Manage action accounts | Microsoft Docs

[#3]

Thanks Martin. I'll look to update this item ASAP.

[#4]

Thanks for the speedy Response !

[#5]

@Ricky Simpson @Martin_Schvartzman @Magenta365 
Looks like that's coming thru now?
https://security.microsoft.com/settings/identities?tabid=manageAccounts