Skip to content

Commit 76c21b8

Browse files
authored
Fix formatting of permissions for querying behaviors
1 parent 51fd5bd commit 76c21b8

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

articles/sentinel/entity-behaviors-layer.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -218,7 +218,7 @@ To enable and use the UEBA behaviors layer, you need these permissions:
218218
| **User action** | **Permission required** |
219219
| ------------------------------------------------------------ | ------------------------------------------------------------ |
220220
| Enable behaviors | At least the **Security Administrator** role in Microsoft Entra ID and the **Microsoft Sentinel Contributor** role in your Sentinel workspace. |
221-
| Query behaviors tables | <ul><li>**Security Reader** or **Security Operator** role in Microsoft Entra ID to run Advanced Hunting queries in the Defender portal.</li><li>**Read** access to the `BehaviorInfo` and `BehaviorEntities` tables in your Sentinel workspace.</li><li>`Read` access to source tables to drill down to raw events.</li></ul> |
221+
| Query behaviors tables | <ul><li>**Security Reader** or **Security Operator** role in Microsoft Entra ID to run Advanced Hunting queries in the Defender portal.</li><li>**Read** access to the `BehaviorInfo` and `BehaviorEntities` tables in your Sentinel workspace.</li><li>**Read** access to source tables to drill down to raw events.</li></ul> |
222222
223223
For more information about unified RBAC in the Defender portal, see [Microsoft Defender XDR Unified role-based access control (RBAC)](/defender-xdr/manage-rbac).
224224

0 commit comments

Comments
 (0)