These Logic Apps can be automatically triggered once a new alert or recommendation appears. One thing that might be confusing in terms of permissions are Logic Apps, which are used in the Workflow Automation part of Microsoft Defender for Cloud.
This role allows users with that role assignment to view Virtual machines in the portal to make changes.Īssigning permissions for using Logic Apps/Workflow Automation For example, to remediate recommendations related to virtual machines, the user will need the Security Admin or Contributor on resource group level for people that should manage resources. To perform remediation of recommendations, users will need the appropriate permissions and access to those workloads. The role assignment pane will open and you will select the role assignment to be granted to user. Once in Access Control (IAM) you will need to add a role assignment, click on “Role assignment”> Add role assignment.Log into the Azure portal > type “Subscriptions” in the search bar > select your subscription > then look for Access Control (IAM).
To assign permissions for Azure workloads:
BUILDRON LIMITED PERMISSIONS HOW TO
In this blog post, I will discuss how to assign the roles used across Microsoft Defender for Cloud and the types of scenarios that determine how they could be assigned.Īssigning permissions to users for specific workloads Over the course of the last couple weeks, I have been asked many questions about how the different Microsoft Defender for Cloud RBAC roles in and how they should be assigned.
0 kommentar(er)
