You are responsible for managing role groups across Microsoft Defender XDR, Microsoft Purview, and Microsoft 365 workloads. You need to ensure that specific users have access to manage security alerts in Microsoft Defender XDR and compliance policies in Microsoft Purview. Which of the following actions should you take to achieve this?