Permissions Required to Migrate to the New Simplified Pricing Model in Microsoft Sentinel
Elevate me please
Thanks to Steven Taylor, we now have an answer to a recent question around the appropriate permissions to shift to the new simplified pricing model for Microsoft Sentinel.
Steven posted the answer from an open service ticket to the Microsoft Security Insights show Discord server…
If you want to migrate to the new simplified pricing model, you need "Microsoft.OperationsManagement/solutions/write" on the "SecurityInsights(<workspace name>)" solution resource, which is not part of Sentinel Contributor. Support is looking at updating either 1) the documentation, or 2) the built-in role.
Original post: https://discord.com/channels/733721671336198256/827603514720911390/1138209619651604580
I’m researching this now to determine which path will be taken to resolve it completely. Expect a follow-up.
…
Not familiar with the Microsoft Security Insights show or its Discord server?
Microsoft Security Insights show: https://aka.ms/GetMSIShow
Join the MSI Show Discord Server: https://discord.gg/2ktJHTrSAt
[Want to discuss this further? Hit me up on Twitter or LinkedIn]
[Subscribe to the RSS feed for this blog]
[Subscribe to the Weekly Microsoft Sentinel Newsletter]
[Subscribe to the Weekly Microsoft Defender Newsletter]
[Subscribe to the Weekly Azure OpenAI Newsletter]
[Learn KQL with the Must Learn KQL series and book]
[Learn AI Security with the Must Learn AI Security series and book]