Microsoft Sentinel is a cloud-native security information and event management (SIEM) platform that uses built-in AI to help analyze large volumes of data across an enterprise — fast.
Required Permissions |
---|
SecurityActions.ReadWrite.All |
SecurityAlert.ReadWrite.All |
SecurityAnalyzedMessage.ReadWrite.All |
SecurityEvents.ReadWrite.All |
SecurityIncident.ReadWrite.All |
<your tenant>
on the API permissions page. Only admins can grant consent.
Microsoft Sentinel Contributor
role.