Which role to use when trying to dismiss user risk option on Risky User Blade in Entra

Question

Hi, I want my helpdesk colleague to make use of the dismiss user risk option in the Microsoft Entra Admin Center on the Risky User Blade with minimum rights. Is Security administrator the "least" privileged role I can assign for him to do this?

Answer 1

yes, from what I have seen and tested, Security Admin or GA is needed to dismiss the risk.

Note that self -remediation is the way to go here if possible:

https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-remediate-unblock#self-remediation-with-risk-based-policy