Permission Required to access Attack Simulation training eventhough I've been assigned the role

Ainul Jasni 41 Reputation points
2022-12-01T05:54:26.077+00:00

Hello,

As per guide in attack-simulation-training-get-started, I should have the role to be able to access. I've been assigned as the Security Administrator from our AAD and I still got this permission issue when trying to access the Attack Simulation Training menu in Microsoft 365 defender portal attacksimulator. am I missing something?

265984-image.png

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
837 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,433 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Ainul Jasni 41 Reputation points
    2022-12-01T08:34:59.017+00:00

    It turns out I need both "security Administrator" role and license of MS E5 or MS Defendender (plan 2).

    0 comments No comments

  2. JamesTran-MSFT 36,656 Reputation points Microsoft Employee
    2022-12-01T23:34:21.533+00:00

    @Ainul Jasni
    I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others", I'll repost your solution in case you'd like to "Accept" the answer.

    Summary:
    When following the Get started using Attack simulation training in Defender for Office 365 documentation, the What do you need to know before you begin section mentioned your user needing to be assigned one of the following roles - Global Administrator, Security Administrator, Attack Simulation Administrators, or Attack Payload Author.

    Issue:
    After assigning your user the Security Administrator role within Azure Active Directory, you still ran into issues when trying to access the Attack Simulation Training menu within the Microsoft 365 defender portal.

    Solution:
    To resolve this issue, you needed both the Security Administrator role and the Microsoft 365 E5 or Microsoft Defender for Office 365 Plan 2 license.

    I noticed that the license info was mentioned at the beginning of the article but could be easily missed when referencing the What do you need to know before you begin section. I created a GitHub issue so our content team can add the license info to prevent this from happening to future customers.

    If you have any other questions, please let me know.
    Thank you again for your time and patience throughout this issue.

    ----------

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.