Jul 17 2024 11:52 AM - edited Jul 17 2024 11:59 AM
Hello ,
I am experiencing difficulties in granting access to manage emails on Microsoft Defender XDR to the SOC team. While the RBAC model in Entra ID roles supports GDAP using our CSP accounts, the roles in Defender XDR operate under a completely independent model (unified RBAC defender XDR), making management via our CSP accounts impossible.
I have reviewed the Microsoft Defender Endpoint RBAC documentation but found no solution.
There are Email & collaboration roles in the Microsoft Defender portal that have no equivalent to Microsoft Entra roles, and are important for security operations (for example the Preview role and the Search and Purge role).
Could you provide guidance on how to achieve this, or suggest an alternative approach?
Your assistance would be greatly appreciated.
Jul 29 2024 01:58 AM - edited Jul 29 2024 01:59 AM
Search and Purge Operations:
Compliance Data Administrator: Allows managing compliance data, including searching and purging data.
eDiscovery Manager: Allows performing eDiscovery searches and managing eDiscovery cases.
: I have this response from support, but not already tested !