Hi folks, hope someone might know how to sort this one...
Here's a screenshot of the same tenant. On the left is our CSP GDAP'd to Global Admin. On the right is a proper GA in the tenant.
Not only is the interface different (see the options in the left column), certain incidents and alerts aren't visible to the GDAP'd GA nor are certain tables (DeviceEvents, SigninLogs) using Advanced hunting.
I know there are new RBAC roles available for Defender, but everything I've read states that if the GDAP'd role has GA we should be good.
What gives?
Thanks,
Ross.