Assign Azure role on Tenant Roots Management Group

Question

Hello Folks

For an Environment mentioned below

Tenant Roots management group -----> Management group ------> 3 Subscription Subscription 1 ,2 , 3

I have Log Analytics ( with Sentinel ) in subscription 1
I have Azure policies on tenant root Management group
I have defender for cloud which cover all subscription with p2 License.

I believe the best scenario to give view for all security controls , security settings on resource , compliance etc is to give security reader on Tenant root level for whole security visibility .

can someone give me step wise way solution to give access on root tenant group so my security member can have entire visibility of security of azure.
I don't want custom role.

Regards

Answer 1

@Mohammed Altamash Khan

You can look into below article and check if this answers your question.
https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal

From Defender for cloud, user need to generate the request and request will be forwarded to Global admin and he will approve.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.