Permissions

Permissions to Security & Compliance are handled through role-based access control (RBAC). If you're used to having your way around Office 365 because you're the global administrator, you may find this very annoying. Exchange admins will be familiar with RBAC because it plays a large role in mailbox permissions, especially if you've ever needed to migrate from an on-premises Exchange server to Office 365. Likewise, those who have experimented with eDiscovery, identity and access protection, or privileged identity management will find the roles for Security & Compliance are largely the same.

There are eight key roles used in Security & Compliance. Of course, Microsoft provides detailed descriptions of these. We'll sum them up more concisely, proceeding in the order that (arbitrarily) made the most sense to us:

• Default roles:
  • Organization Management: This automatically includes global administrators. It can control Security & Compliance center permissions and also...