Secure SIR usage with custom permission sets

Set permissions to decide which administrators can create or use potentially risky SIR policies.

Only global administrators can create permission sets.

Navigate to User Management → Permission Sets and click New Permission Set.
Enter a name and assign the desired users.
From the Permission Sets list, find your new set and click Edit next to System Information Reporter.
Select the appropriate permissions you want to grant for SIR policies (for example, read-only, full access), and then click Save.