Forum Discussion
Grant access to Security Administrators on Secure Score
Hey Gents,
The non-global-admin access has been in place since April 2017. Any users with admin roles are able to access the Secure Score experience, but will not be able to make changes unless that change is in scope for the admin role they are assigned. If you aren't seeing that behavior, please do escalate to Microsoft support so they can help get it resolved.
Thanks!
Brandon Koeller
Hey Gents,
The non-global-admin access has been in place since April 2017. Any users with admin roles are able to access the Secure Score experience, but will not be able to make changes unless that change is in scope for the admin role they are assigned. If you aren't seeing that behavior, please do escalate to Microsoft support so they can help get it resolved.
Thanks!
Brandon Koeller
Brandon Koeller thanks for the information. Any plans to allow the "Security Reader" role the ability to view the data in the Secure Score portal? For example in our organisation we would like to be able to provide management a view on the state of compliance but don't want them to have admin rights . They could inadvertently change a setting with admin privileges but more importantly we don't want to contaminent an on-prem user identity with access to email and the web having admin privileges in O365.
The other solution would be if you plan to produce a PowerBI content pack that consumes the data from Secure Score portal
Many thanks
Paul
- Hey Paul,
Thanks for the follow-up. Straight up, I didn't even realize there was a role in AAD called Security Reader. :) I've added a task to our backlog to get this role added to the allow list. Thanks for the feedback!
Brandon KoellerHi Brandon, Any news on the Security Reader role getting access to the Security Score pages?
+1 on having the Security Reader or Security Administrator role access to securescore without having the ability to modify settings. I lead the InfoSec team and the system admins do not want my team to have modify access. We are also getting the 403 "You are not an administrator for your tenancy. The Secure Score requires some kind of administrative role for access" error. Is there a status? Thanks!
@Brandon Koeller - adding another vote to allow 'Security Reader' to … um … read … security … kind of sounds like what's it mean to do, huh?
I would absolutely love the ability visit https://securescore.office.com or see the data from a widget on https://protection.office.com without bothering my O365 Administrators.
Can you please add these abilities to the 'Security Reader' role?
