demisto / content-docs

Demisto Content Developer Docs
https://xsoar.pan.dev/
MIT License
41 stars 56 forks source link

Issue with "O365 - Security And Compliance - Content Search v2" in @site/docs/reference/integrations/security-and-compliance-v2.md #1409

Closed dgriffinzero closed 1 year ago

dgriffinzero commented 1 year ago

Describe the problem

In the instructions, it states to use the Data Investigator role group. However, the Data Investigator role group doesn't provide the necessary permissions to run any of the hold or compliance creation or deletion scripts.

Data Investigator Roles: Communication Compliance Search Custodian Data Investigation Management Export Preview Review RMS Decrypt Search And Purge

Without the Hold and Case Management roles, it can't manage holds or manage any cases that aren't already assigned to it.

Screenshots

Environment

Suggested fix

Direct admins to create a custom role group with the following roles: Case Management Communication Compliance Search Custodian Data Investigation Management Export Hold Preview Review RMS Decrypt Search And Purge

The permissions issue can be validated here: Microsoft Learn | Roles and Role Groups for Office 365 and Microsoft Purview

Instructions for role group are here: Microsoft Learn | Create a custom Microsoft Purview role group

welcome[bot] commented 1 year ago

Hi and welcome to our Content Developer Docs project! Thanks and congrats for opening your very first issue. If you know the fix, you may also submit a PR to fix the issue if you like!

MosheEichler commented 1 year ago

Fixed in this PR