Feb 26 2024 12:28 AM
Hello,
What roles or permissions should I assign to the user who has task assigned to integrate all the resources with Microsoft Sentinel from multiple resources groups from different subscriptions? I know there are roles like Microsoft Sentinel Contributor but when we talk about integration from multiple resources it won't work.
TIA!
Feb 26 2024 04:23 AM
Hello @Usama_Saleem,
I am not sure but I think you have to grant "Microsoft Sentinel Responder" for each subscription.
See this bellow:
Best Regards
Kevin