azure-docs
azure-docs copied to clipboard
Create and edit security policies, seems to be important on exam SC-200 but not on this page, which is linked from practice assessment
The following exam question is not possible to answer using this page, which is the defacto page for such questions:
Action | Security Reader /Reader | Security Admin | Contributor / Owner | Contributor | Owner |
---|---|---|---|---|---|
(Resource group level) | (Subscription level) | (Subscription level) | |||
Add/assign initiatives (including) regulatory compliance standards) | - | ✔ | - | - | ✔ |
Edit security policy | - | ✔ | - | - | ✔ |
Enable / disable Microsoft Defender plans | - | ✔ | - | ✔ | ✔ |
Dismiss alerts | - | ✔ | - | ✔ | ✔ |
Apply security recommendations for a resource(and use Fix) | - | - | ✔ | ✔ | ✔ |
View alerts and recommendations | ✔ | ✔ | ✔ | ✔ | ✔ |
Exempt security recommendations | - | ✔ | - | - | ✔ |
Is there any way the two things (exam question / documentation) can be reconciled? I'll be writing the exam soon and I keep on running into this kind of thing.
Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.
- ID: 98967f78-19ff-360f-db07-ad9900f59105
- Version Independent ID: ba435b7b-7cc9-11de-ad2a-20a837221957
- Content: User roles and permissions - Microsoft Defender for Cloud
- Content Source: articles/defender-for-cloud/permissions.md
- Service: defender-for-cloud
- GitHub Login: @dcurwin
- Microsoft Alias: dacurwinAction Security Reader / Reader Security Admin Contributor / Owner Contributor Owner (Resource group level) (Subscription level) (Subscription level) Add/assign initiatives (including) regulatory compliance standards) - ✔ - - ✔ Edit security policy - ✔ - - ✔ Enable / disable Microsoft Defender plans - ✔ - ✔ ✔ Dismiss alerts - ✔ - ✔ ✔ Apply security recommendations for a resource (and use Fix) - - ✔ ✔ ✔ View alerts and recommendations ✔ ✔ ✔ ✔ ✔ Exempt security recommendations - ✔ - - ✔
@JeremyTBradshaw Thank you for bringing this to our attention. I've delegated this to content author, who will review it and offer their insightful opinions.
Just close, based on outcome from similar issue #122048. Somebody at Microsoft needs to care more, I need to care less.