search

cudeso / misp2sentinel

MISP to Sentinel integration
MIT License
60 stars 21 forks source link

Azure permission #85

Closed ATIOSA closed 8 months ago

ATIOSA commented 8 months ago

Hi! 

I've got a question: « Microsoft Sentinel Contributor » is a high permission. Is it possible to reduce this? Or create a custom rule? In this case, what permissions are needed?

cudeso commented 8 months ago

Hello. This permissions is part of the Microsoft requirements, please see: https://learn.microsoft.com/en-us/azure/sentinel/connect-threat-intelligence-upload-api#assign-a-role-to-the-application