Microsoft Security Operations Analyst Associate SC-200 Practice Question

The Microsoft Sentinel Responder role lets users view incidents and evidence and perform incident response actions such as assigning incidents, changing their status, and adding comments or tags. It does not grant permissions to configure Microsoft Sentinel (for example, create analytic rules or manage data connectors) or to change Log Analytics workspace settings. The Microsoft Sentinel Contributor role would allow full configuration, while Microsoft Sentinel Reader is view-only. Log Analytics Contributor controls only workspace data but does not give the required incident response rights.