demisto / content-docs

Demisto Content Developer Docs
https://xsoar.pan.dev/
MIT License
41 stars 59 forks source link

Issue with "O365 - Security And Compliance - Content Search v2" in @site/docs/reference/integrations/security-and-compliance-v2.md #1409

Closed dgriffinzero closed 9 months ago

dgriffinzero commented 10 months ago

Describe the problem

In the instructions, it states to use the Data Investigator role group. However, the Data Investigator role group doesn't provide the necessary permissions to run any of the hold or compliance creation or deletion scripts.

Data Investigator Roles: Communication Compliance Search Custodian Data Investigation Management Export Preview Review RMS Decrypt Search And Purge

Without the Hold and Case Management roles, it can't manage holds or manage any cases that aren't already assigned to it.

Screenshots

Environment

Suggested fix

Direct admins to create a custom role group with the following roles: Case Management Communication Compliance Search Custodian Data Investigation Management Export Hold Preview Review RMS Decrypt Search And Purge

The permissions issue can be validated here: Microsoft Learn | Roles and Role Groups for Office 365 and Microsoft Purview

Instructions for role group are here: Microsoft Learn | Create a custom Microsoft Purview role group

welcome[bot] commented 10 months ago

Hi and welcome to our Content Developer Docs project! Thanks and congrats for opening your very first issue. If you know the fix, you may also submit a PR to fix the issue if you like!

MosheEichler commented 9 months ago

Fixed in this PR