Microsoft 365 Defender Security Portal : Managing email download and preview permissions

Microsoft 365 is a comprehensive suite of tools and services that enables businesses to manage their data securely and efficiently. A crucial aspect of data administration is ensuring that the correct individuals have the appropriate access levels to perform their duties without jeopardising data security. Using the Microsoft 365 compliance centre (compliance.microsoft.com), we will walk through the process of assigning user permissions to access and preview email communications. I have endeavored to rectify this problem using the procedures provided below.

As per the Microsoft Documentation Preview role needs to be assigned from Defender Portal. However, this feature is not available. You have to complete the steps using Microsoft 365 Compliance Portal. Please refer to detailed steps below:

ISSUE : Administrator cannot preview or Download email from M365 Defender Security Portal (security.microsoft.com)


Finally, here are the set of steps to be followed that I found that resolved the issue:

Step 1: Accessing the Microsoft 365 compliance center
1. Login to Microsoft 365 : 
        Sign in to your Microsoft 365 administrator account.
2. Navigate to the Compliance Centre :  
        Sign in to the Microsoft 365 compliance centre https://compliance.microsoft.com/ using your                administrator credentials.

Step 2: Navigating to Permissions

1. Find and select on the 'Permissions' option in the Microsoft 365 compliance center's left navigation         pane.
 
2. This will display a page listing the different permission responsibilities that can be assigned to                users.




Step 3: Creating a Role

1. Select Roles from the Microsoft Purview Solution menu. It will open a new window if the Down            Arrow label is dropped.
2. Now click on New Role Group Button


Step 4: Creating a Role
1. Enter the Name of the Role and click on next.
2. Then search and select the names of the Role, “Preview” and then click on next.


3. Then, add the member from the list, which would vary depending on the case but would always            include Admin.



 
Step 5: Saving Changes

1. After making the necessary adjustments, make sure to save the changes.
2. Review the permissions to ensure that they have been assigned correctly.


Verifying Access

After designating permissions, it is advisable to confirm that users have received the access as intended. You can communicate with the users and request that they perform a test to ensure that they are able to download and preview emails as necessary.

For example : The screenshot below shows the users can download or preview email.



 


Comments

Post a Comment

Popular posts from this blog

How to enable iOS unmanaged apps to read managed contacts & write unmanaged contacts without compromising security using Microsoft Intune

Image
The contacts saved in Exchange is considered managed contacts. with iOS 12 onwards managed contacts are not visible from unmanaged Apps. As stated in Apple Article (https://support.apple.com/en-au/HT208749)  iOS 12, you can use MDM to make the following exceptions to this policy: Allow unmanaged apps to access managed contacts Allow managed apps to save contacts to the local Contacts app Microsoft Intune have introduced new feature, but it has pre-requisite to "Viewing corporate documents in unmanaged apps" to write contact to unmanaged app and "Viewing non-corporate documents in corporate apps" to read managed contacts in unmanaged app.  This can be security issue for many organisations. However, you can enable this without changing the parent policy by following trick! Go to iOS restriction settings in Intune, go to 'App Store, Doc Viewing, Gaming controls'. As highlighted above 'Allow managed apps to write contacts
Read more

How to deploy Application (offline installer DMG) on Apple MacOS Devices using Microsoft Intune

Image
Microsoft Intune does not support deployment of DMG file. As per the  Microsoft documentation   : " Only  .pkg files may be used to upload macOS LOB apps to Microsoft Intune. Conversion of other formats, such as .dmg to .pkg is not supported." Microsoft Intune have provided support to deploy shell script to macOS. In the example below, I will deploy Adobe Acrobat Reader DC 2020.009.20063 DMG file on MacOS Device. Save following script as .sh package i.e.  InstallAdobeReader.sh #! /bin/sh url=https://ardownload2.adobe.com/pub/adobe/reader/mac/AcrobatDC/2000920063/AcroRdrDC_2000920063_MUI.dmg   set -x tempd=$(mktemp -d) curl $url > $tempd/AdobeReaderDC.dmg listing=$(sudo hdiutil attach $tempd/AdobeReaderDC.dmg | grep Volumes) volume=$(echo "$listing" | cut -f 3) package=$(ls -1 "$volume" | grep .pkg | head -1) sudo installer -pkg "$volume"/"$package" -target / sudo hdiutil detach "$(echo "$volume" | cut -f 1)" rm -r
Read more

ConfigMgr CB Backup Failing

Image
SCCM site backup was failing with following error,  smsbkup.log showing following error. Cannot find the dependent writer. The dependant component cannot be backed up. AddDependentComponent(pDependency) failed. Error code = 0x80,004,005.Error description = . Error: GatherWriterMetadata failed. 1. To fix this issue  Run 'VSSAdmin list writers' command. 2. Ensure following writers listed. 3. If you identify these two writers are not listed, restart 'SQL Server VSS Writer' if SQLServierWriter' is missing or 'SMS_Site_VSS_Writer' if SMS writer is missing. 4. 'VSSAdmin list writers', ensure both services are listed. 5. start sms_site_backup service to start backup, monitor smsbkup.log, ensure backup completed successfully.
Read more