Email & collaboration roles

Use this page to primarily manage permissions for security with MDO. There are two security models you can use when managing roles in Defender. You can use these built in permissions pages, or you can use the Microsoft XDR RBAC. If using XDR RBAC this permission page does not exist.

There are built in roles and custom roles, for built-in roles you can only modify who is a member, while custom roles you can adjust the permissions and members as needed.

Note

If you are a Global Administrator and want to preview emails in the explorer you can come here and create a preview role to view messages. Consider compliance when deciding who can preview an email message. While it can be useful for determining if an email is malicious it can also give access to privileged information.