last sync: 2024-Nov-25 18:54:24 UTC

Configure Microsoft Defender for Endpoint integration settings with Microsoft Defender for Cloud (WDATP)

Azure BuiltIn Policy definition

Source Azure Portal
Display name Configure Microsoft Defender for Endpoint integration settings with Microsoft Defender for Cloud (WDATP)
Id da56d295-2889-41ce-a4cd-6f50fb93aa68
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 1
1.0.0
Built-in Versioning [Preview]
Category Security Center
Microsoft Learn
Description Configures the Microsoft Defender for Endpoint integration settings, within Microsoft Defender for Cloud (also known as WDATP), for Windows downlevel machines onboarded to MDE via MMA, and auto provisioning of MDE on Windows Server 2019 , Windows Virtual Desktop and above. Must be turned on in order for the other settings (WDATP_UNIFIED, etc.) to work. See: https://learn.microsoft.com/azure/defender-for-cloud/integration-defender-for-endpoint for more information.
Mode All
Type BuiltIn
Preview False
Deprecated False
Effect Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled
RBAC role(s)
Role Name Role Id
Security Admin fb1c8493-542b-48eb-b624-b4c8fea62acd
Rule aliases THEN-ExistenceCondition (1)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Security/settings/DataExportSetting.enabled Microsoft.Security settings properties.enabled True False
Rule resource types IF (1)
Microsoft.Resources/subscriptions
THEN-Deployment (1)
Microsoft.Security/settings
Compliance Not a Compliance control
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type
Configure multiple Microsoft Defender for Endpoint integration settings with Microsoft Defender for Cloud 77b391e3-2d5d-40c3-83bf-65c846b3c6a3 Security Center GA BuiltIn
History
Date/Time (UTC ymd) (i) Change type Change detail
2024-02-13 19:27:15 add da56d295-2889-41ce-a4cd-6f50fb93aa68
JSON compare n/a
JSON
api-version=2021-06-01
EPAC