Microsoft Defender for Identity support
This article provides information about support, troubleshooting options, and community resources.
To contact Microsoft Support:
If you have Unified Support, visit the portal for Unified Support customers to submit incidents, browse solutions, and get help.
For other customers, use the support widget as follows:
It's important to know the specific roles that have permission to open support cases.
At a minimum, you must have a Service Support Administrator OR Helpdesk Administrator role.
For more information on which roles have permission, see, Security Administrator permissions. Roles that include the action microsoft.office365.supportTickets/allEntities/allTasks
can submit a case.
For general information on admin roles, see About admin roles.
Accessing the new support widget can be done in one of two ways:
Selecting the question mark on the top right of the portal and then selecting "Microsoft support":
Selecting the Need help? button in the bottom right of the Microsoft Defender portal:
In the widget you'll be offered two options:
- Find solutions to common problems
- Open a service request
This option includes articles that might be related to the question you may ask. Just start typing the question in the search box and articles related to your search will be surfaced.
In case the suggested articles aren't sufficient, you can open a service request by selecting Contact support at the bottom of the pane.
After you've searched for your issue in How can we help? (and selected the blue Search arrow), you can open a service request by selecting Contact support at the bottom of the pane.
Notes
If you have a premier support contract with Microsoft, you'll see the premier tag on the widget. If not, contact your Microsoft account manager.
- Fill in a title and description for the issue you're facing, the phone number and email address where we may reach you.
- (Optional) Include up to five attachments that are relevant to the issue to provide more context for the support case.
- Select your time zone and an alternative language, if applicable. The request will be sent to Microsoft Support Team. The team will respond to your service request shortly.
The service health status for Defender for Identity is displayed in the Microsoft 365 admin center - Service health page, under Microsoft Defender XDR. This page tells you if the Defender for Identity portal is up and active, if there are issues with detections, and if the sensor can send traffic to the cloud.
If you have a question about how something works, check whether your question is already answered in Frequently asked questions.
If you have a question about a prerequisite for Defender for Identity, see Defender for Identity prerequisites.
For information regarding investigation security alerts, see the security alert guide.
We recommend the Tech Community group for Defender for Identity. This resource provides direct responses from the Defender for Identity team in addition to the benefit of shared experiences and knowledge from other administrators and consultants.