Deprecated operationnames used in MS built-in policies -> "Microsoft.Security/securitySolutions/write" & "Microsoft.Security/securitySolutions/delete"

[BartDecker]

Details of the scenario you tried and the problem that is occurring

I wonder if both operation names related to creating or removing a security solution are deprecated or changed?

• "Microsoft.Security/securitySolutions/write"
• "Microsoft.Security/securitySolutions/delete"

These operation names come back in the CIS Initiative and in the monitoring policy like mentioned here: ActivityLog_SecurityOperations_Audit.json

When creating and deleting a security solution the resulting operation names are:

• Microsoft.Security/locations/securitySolutions/write
• Microsoft.Security/locations/securitySolutions/delete

[BartDecker]

I have a confirmation via a support ticket that

"Microsoft.Security/securitySolutions/write" "Microsoft.Security/securitySolutions/delete"

changed to

Microsoft.Security/locations/securitySolutions/write Microsoft.Security/locations/securitySolutions/delete

Is there somebody who could pick this up and have this changed in some of the MS built-in policies which are used in the CIS built-in initiaitve?

[RyanHill-MSFT]

@BartDecker what was your support request number?