ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/271 feeds/APIs · 464/464 docs · 8/9 advisories · checked 23:49 UTC Customize Public modeDiscuss ChangeIntel on Discord

Roles and permissions

Explore Microsoft's documented roles and permissions, and follow changes to each public reference.

Defender unified RBAC

Defender unified RBAC permissions

Microsoft reference
Source and coverage

A permission catalog for creating roles, not a catalog of tenant role definitions. Workload activation, data scopes and assignments are not established here.

1 of 1 reference page has a baseline · 0 failed their last read. A failed or unparsed page cannot establish that a role or permission disappeared.

These public references do not establish tenant assignments or effective access. Reference labels and anchors do not establish stable vendor template IDs or confirmed renames.

Observed changes and exact document comparisons

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

28 matching entries · captured 23 Oct 2026, 08:30 UTC

Article history
Role or permissionReference typeDocumented terms
Advanced live responselabel:security-operations--security-data:Advanced live response:ManagePermission catalog entry
2 documented terms

Permission group

  • Security operations – Security data

Level

  • Manage
Alertslabel:security-operations--security-data:Alerts:ManagePermission catalog entry
2 documented terms

Permission group

  • Security operations – Security data

Level

  • Manage
Analytics Jobs Schedulelabel:data-operations-preview:Analytics Jobs Schedule:Read / ManagePermission catalog entry
2 documented terms

Permission group

  • Data operations (Preview)

Level

  • Read / Manage
Application handlinglabel:security-posture--posture-management:Application handling:ManagePermission catalog entry
2 documented terms

Permission group

  • Security posture – Posture management

Level

  • Manage
Authorizationlabel:authorization-and-settings:Authorization:Read / ManagePermission catalog entry
2 documented terms

Permission group

  • Authorization and settings

Level

  • Read / Manage
Basic live responselabel:security-operations--security-data:Basic live response:ManagePermission catalog entry
2 documented terms

Permission group

  • Security operations – Security data

Level

  • Manage
Core security settingslabel:authorization-and-settings:Core security settings:Read / ManagePermission catalog entry
2 documented terms

Permission group

  • Authorization and settings

Level

  • Read / Manage
Datalabel:data-operations-preview:Data:ManagePermission catalog entry
2 documented terms

Permission group

  • Data operations (Preview)

Level

  • Manage
Detection tuninglabel:authorization-and-settings:Detection tuning:ManagePermission catalog entry
2 documented terms

Permission group

  • Authorization and settings

Level

  • Manage
Email & collaboration advanced actionslabel:security-operations--security-data:Email & collaboration advanced actions:ManagePermission catalog entry
2 documented terms

Permission group

  • Security operations – Security data

Level

  • Manage
Email & collaboration contentlabel:security-operations--raw-data-email--collaboration:Email & collaboration content:ReadPermission catalog entry
2 documented terms

Permission group

  • Security operations – Raw data (Email & collaboration)

Level

  • Read
Email & collaboration content: Emails associated with alertslabel:security-operations--raw-data-email--collaboration:Email & collaboration content: Emails associated with alerts:ReadPermission catalog entry
2 documented terms

Permission group

  • Security operations – Raw data (Email & collaboration)

Level

  • Read
Email & collaboration content: Quarantine Emailslabel:security-operations--raw-data-email--collaboration:Email & collaboration content: Quarantine Emails:ReadPermission catalog entry
2 documented terms

Permission group

  • Security operations – Raw data (Email & collaboration)

Level

  • Read
Email & collaboration metadatalabel:security-operations--raw-data-email--collaboration:Email & collaboration metadata:ReadPermission catalog entry
2 documented terms

Permission group

  • Security operations – Raw data (Email & collaboration)

Level

  • Read
Email & collaboration quarantinelabel:security-operations--security-data:Email & collaboration quarantine:ManagePermission catalog entry
2 documented terms

Permission group

  • Security operations – Security data

Level

  • Manage
Exception handlinglabel:security-posture--posture-management:Exception handling:ManagePermission catalog entry
2 documented terms

Permission group

  • Security posture – Posture management

Level

  • Manage
Exposure Managementlabel:security-posture--posture-management:Exposure Management:Read / ManagePermission catalog entry
2 documented terms

Permission group

  • Security posture – Posture management

Level

  • Read / Manage
File collectionlabel:security-operations--security-data:File collection:ManagePermission catalog entry
2 documented terms

Permission group

  • Security operations – Security data

Level

  • Manage
Remediation handlinglabel:security-posture--posture-management:Remediation handling:ManagePermission catalog entry
2 documented terms

Permission group

  • Security posture – Posture management

Level

  • Manage
Responselabel:security-operations--security-data:Response:ManagePermission catalog entry
2 documented terms

Permission group

  • Security operations – Security data

Level

  • Manage
Run scanlabel:security-posture--ai-code-scan:Run scan:ManagePermission catalog entry
2 documented terms

Permission group

  • Security posture – AI code scan

Level

  • Manage
Scan resultslabel:security-posture--ai-code-scan:Scan results:ReadPermission catalog entry
2 documented terms

Permission group

  • Security posture – AI code scan

Level

  • Read
Scan resultslabel:security-posture--ai-code-scan:Scan results:ManagePermission catalog entry
2 documented terms

Permission group

  • Security posture – AI code scan

Level

  • Manage
Security baseline assessmentlabel:security-posture--posture-management:Security baseline assessment:ManagePermission catalog entry
2 documented terms

Permission group

  • Security posture – Posture management

Level

  • Manage
Security data basicslabel:security-operations--security-data:Security data basics:ReadPermission catalog entry
2 documented terms

Permission group

  • Security operations – Security data

Level

  • Read

Source: Microsoft, © Microsoft Corporation. Read the original for descriptions, exceptions and applicability.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 25 Oct 23:49 UTC · 271 of 271 readable · 269 fully read · documentation 464/464 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.