A recent Service Health post in the Office 365 Admin Center, regarding a problem with Defender XDR, says “This issue impacts tenant admins and users with system and organization controls (SOC) permissions.”

Is this a mistake?  Do they mean “security operations center permissions” (i.e., Entra ID roles or RBAC roles) rather than “system and organization controls?”  The former would make sense.

Looking for any clarity anyone can provide on this post.

Thanks in advance!

​A recent Service Health post in the Office 365 Admin Center, regarding a problem with Defender XDR, says “This issue impacts tenant admins and users with system and organization controls (SOC) permissions.” Is this a mistake?  Do they mean “security operations center permissions” (i.e., Entra ID roles or RBAC roles) rather than “system and organization controls?”  The former would make sense. Looking for any clarity anyone can provide on this post. Thanks in advance!  Read More

​