Skip to content

Commit 51fd5bd

Browse files
authored
Update permissions formatting in UEBA behaviors layer
1 parent 5b0ecb7 commit 51fd5bd

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

articles/sentinel/entity-behaviors-layer.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -217,8 +217,8 @@ To enable and use the UEBA behaviors layer, you need these permissions:
217217
218218
| **User action** | **Permission required** |
219219
| ------------------------------------------------------------ | ------------------------------------------------------------ |
220-
| Enable behaviors | At least the **Security Administrator** role in Microsoft Entra ID and the `Microsoft Sentinel Contributor` role in your Sentinel workspace. |
221-
| Query behaviors tables | <ul><li>**Security Reader** or **Security Operator** role in Microsoft Entra ID to run Advanced Hunting queries in the Defender portal.</li><li>`Read` access to the `BehaviorInfo` and `BehaviorEntities` tables in your Sentinel workspace.</li><li>`Read` access to source tables to drill down to raw events.</li></ul> |
220+
| Enable behaviors | At least the **Security Administrator** role in Microsoft Entra ID and the **Microsoft Sentinel Contributor** role in your Sentinel workspace. |
221+
| Query behaviors tables | <ul><li>**Security Reader** or **Security Operator** role in Microsoft Entra ID to run Advanced Hunting queries in the Defender portal.</li><li>**Read** access to the `BehaviorInfo` and `BehaviorEntities` tables in your Sentinel workspace.</li><li>`Read` access to source tables to drill down to raw events.</li></ul> |
222222
223223
For more information about unified RBAC in the Defender portal, see [Microsoft Defender XDR Unified role-based access control (RBAC)](/defender-xdr/manage-rbac).
224224

0 commit comments

Comments
 (0)