Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
708 questions
GDAP Guest Denied Access to Certain Azure Services
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 96%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIA%3C/text%3E%3C/svg%3E)
IT-ATeam
0
Reputation points
Forgive me for not knowing which department/tag to ask this question. I'm partnering with an MSP that'll be utilizing Microsoft 365 Business Premium and working through the Partner Center to administer services. We have setup GDAP admin relationships and invited their team as guests in Azure AD then assigned them azure administrative roles. I've noticed they cannot modify the Preset Security Policies within Microsoft 365 Defender at https://security.microsoft.com/. A number of other settings are also locked/removed as well, including the entire https://compliance.microsoft.com/ page. So, I figured it must be a permission issue? The purview compliance portal isn't a concern, mostly the Defender bit we'd like to give them access to.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
Givary-MSFT 30,251 Reputation points Microsoft Employee2023-04-06T09:52:28.4933333+00:00 @IT-ATeam Thank you for reaching out to us, As I understand you are looking for information related to RBAC for Microsoft 365 Defender, regarding your requirement would suggest to review this article https://video2.skills-academy.com/en-us/microsoft-365/security/defender/custom-permissions-details?view=o365-worldwide talks about permissions required in Microsoft 365 defender.
Also refer to these articles for more information related to permissions https://video2.skills-academy.com/en-us/microsoft-365/security/office-365-security/scc-permissions?view=o365-worldwide https://video2.skills-academy.com/en-us/microsoft-365/compliance/microsoft-365-compliance-center-permissions?view=o365-worldwide Let me know if you have any further questions, we can connect offline to discuss on the same, you can reach me by sending an email on azcommunity [at] microsoft [dot] com referencing this issue with a subject line "ATTN:Givary" -
IT-ATeam 0 Reputation points
2023-04-18T13:43:40.0266667+00:00 I have RBAC setup and I waited some time to check back. It seems like there are no changes. Granted they have access to seemingly everything within Microsfot Defender aside from items within "Policies & rules". The focus is Threat policies > Preset security policies. Maybe this is working as intended, regardless I attached a screenshot of the settings we're trying to set to be manageable by the MSP.
Sign in to comment