Need Detail on Security Role to Deanonymize data

[sliver85]

This page should include detail on the security role/permissions required to deanonymize data. We've found that "security operators" cannot do this, while "security administrators" can. It is really helpful when the documentation lists the specific roles, either global M365 roles or MDfCA roles, can perform the documented actions.

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: 19faaa3d-f160-361c-406b-b257498224e1
• Version Independent ID: 2c9d8c98-c043-b73b-d54e-98f9cfbd6e4e
• Content: Cloud Discovery data anonymization - Microsoft Defender for Cloud Apps
• Content Source: CloudAppSecurityDocs/cloud-discovery-anonymizer.md
• Service: defender-for-cloud-apps
• GitHub Login: @batamig
• Microsoft Alias: bagol

[batamig]

Hi @silver85, thanks for writing into docs! In general, our role information is listed here, but we'll investigate this point and consider an update to this page.