Skip to content

Document sensitive roles for Defender for Identity integrations #484

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
anunesms wants to merge 1 commit into
base: public
Choose a base branch
from
+55 −0
Open

Document sensitive roles for Defender for Identity integrations #484

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
55 changes: 55 additions & 0 deletions defender-for-identity/entity-tags.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -76,6 +76,61 @@ In addition to these groups, Defender for Identity identifies the following high
- DHCP Server
- DNS Server
- Microsoft Exchange Server
- Replicating Directory Changes Permissions

## Defender for Identity Integrations

The following roles are designated as Sensitive by Microsoft Defender for Identity. Any entity assigned membership in these roles is automatically classified as sensitive.

### Okta

- Super Administrator
- Application Administrator
- Group Administrator
- API Access Management Administrator
- Group Membership Administrator
- Help Desk Administrator
- Mobile Administrator
- Organization Administrator
- Read-only Administrator
- Report Administrator

### CyberArk

- Administration Role
- Cloud Onboarding Admin
- Connector Management Admin
- Flows Admin
- Privilege Cloud Administrators
- Privilege Cloud Administrators Basic
- Privilege Cloud Administrators Lite
- Privilege Cloud Safe Managers
- Privilege Cloud Safe Managers Basic
- Privilege Cloud Safe Managers Lite
- Privilege Cloud Session Admin
- Privilege Cloud Session Risk Managers
- System Administrator

### SailPoint

#### Entra Id Roles
- Global Administrator
- User Administrator
- Authentication Administrator
- Privileged Authentication Administrator
- Helpdesk Administrator
- Agent ID Administrator
- Application Administrator
- Directory Writers
- Domain Name Administrator
- Password Administrator
- Privileged Role Administrator
- Hybrid Identity Administrator
- Cloud Application Administrator

#### SailPoint Roles

- IdentityNow Administrator


## Related content
Expand Down