Manage role based access control (RBAC) in ITDR

Assign ITDR permissions for Conditional Access and Identity Security Runtime features.

Prerequisites

ITDR add-on

The following permissions enable users to use and manage ITDR features. You can manage these role permissions under Settings → Configurations → Access Management → Roles.

Feature	Description	​Roles
Conditional Access Policy	Configure and manage real time, risk-based authentication rules and MFA enforcement.	Viewer: Read-only access to current Conditional Access Policies. Administrator: Full access including configuring Conditional Access Policies.
Identity Security Runtime	Access identity-specific risk dashboards, interactive risk views, and identity detection rules.	Viewer: Read-only access to identity runtime operations. Administrator: Full access to identity runtime operations, including managing LDAP Protection and other ITDR capabilities.