Exam SC-200 topic 3 question 88 discussion

DRAG DROP
-

You have an Azure subscription that contains two users named User1 and User2 and a Microsoft Sentinel workspace named workspace1.

You need to ensure that the users can perform the following tasks in workspace1:
• User1 must be able to dismiss incidents and assign incidents to users.
• User2 must be able to modify analytics rules.

The solution must use the principle of least privilege.

Which role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Suggested Answer: