Granting user access to view attack simulation modules

Question

Granting user access to view attack simulation modules

Patrick Selby 5

I am trying to find a way to grant user permissions to view just the training modules in Microsoft Defender Attack Simulation without granting them admin level permissions to access all the features in defender. If that is not an option, is there a way to download those modules for user to view independently from setting up an attack simulation?

Marilee Turscak-MSFT 37,266 Reputation points Microsoft Employee Moderator

2024-02-16T20:19:43.62+00:00

@Patrick Selby I moved this to the Microsoft 365 tag since this isn't connected to Defender for Cloud. https://v4.hkg1.meaqua.org/en-us/microsoft-365/security/office-365-security/attack-simulation-training-get-started?view=o365-worldwide To access the Attack Simulation Training menu my understanding is that you need the Security Administrator role. https://v4.hkg1.meaqua.org/en-us/microsoft-365/security/office-365-security/attack-simulation-training-get-started?view=o365-worldwide

To access the APIs you need the Security Reader role. https://techcommunity.microsoft.com/t5/security-compliance-and-identity/announcing-attack-simulation-training-read-apis-now-in-beta/ba-p/2821787

2 answers

Your answer

Marilee Turscak-MSFT 37,266 Reputation points Microsoft Employee Moderator

2024-02-16T20:19:43.62+00:00

@Patrick Selby I moved this to the Microsoft 365 tag since this isn't connected to Defender for Cloud. https://v4.hkg1.meaqua.org/en-us/microsoft-365/security/office-365-security/attack-simulation-training-get-started?view=o365-worldwide To access the Attack Simulation Training menu my understanding is that you need the Security Administrator role. https://v4.hkg1.meaqua.org/en-us/microsoft-365/security/office-365-security/attack-simulation-training-get-started?view=o365-worldwide

To access the APIs you need the Security Reader role. https://techcommunity.microsoft.com/t5/security-compliance-and-identity/announcing-attack-simulation-training-read-apis-now-in-beta/ba-p/2821787

Answer 1

Catherine Kyalo 2,695 Microsoft Employee

As of current Microsoft Defender for Office 365 permissions, you can't assign a user permissions to view just the training modules in Microsoft Defender Attack Simulation without granting them admin level permissions.

Patrick Selby 5 Reputation points

2024-03-15T13:02:57.86+00:00

Thank you for confirming. I suspected that may be the case. Our training folks were interested in seeing these modules without either granting admin access or incorporate them into a attack simulation. They were hoping they could incorporate them as part of new employee orientation training.

Answer 2

Bit late to the party and this may have changed since then, but could you use attack simulator admin?

Actions	Description
microsoft.office365.protectionCenter/attackSimulator/payload/allProperties/allTasks	Create and manage attack payloads in Attack Simulator

microsoft.office365.protectionCenter/attackSimulator/payload/allProperties/allTasks	Create and manage attack payloads in Attack Simulator
microsoft.office365.protectionCenter/attackSimulator/reports/allProperties/read	Read reports of attack simulation, responses, and associated training
microsoft.office365.protectionCenter/attackSimulator/simulation/allProperties/allTasks	Create and manage attack simulation templates in Attack Simulator

Share via

Granting user access to view attack simulation modules

2 answers

Your answer