Support access you own
Remote support only through an app you create, scope and can remove at any time.

Purpose
Vendors with standing access to customer tenants are a supply-chain risk.
Design
Support uses an Invardia Support app registration that the customer creates in their own tenant. At the troubleshoot level it reads only - Key Vault metadata without secret values and read-only database access; at the setup level it gets what deployment and repair need on SecurityInsight's own resources. SecurityInsight grants its part with one command, and the same command takes it back.
Business opportunities
Fast help when you need it, with access that stays under your control.
Related features
Roles and scoped access
Reader, Delegated, Admin and SuperAdmin - checked on the server for every page and every action.
External advisors with a second check
Let trusted consultants review and recommend for a department - and approve only after a second check.
Template releases by update ring, with roll back
New detection rules and reports arrive by ring, are reviewed per detection method, and can be rolled back.
Asset tagging, with a dry run first
Write SecurityInsight's classification back as Defender tags, Azure tags and Entra attributes - after seeing what would change.