To modify a security policy, you must be a Security Administrator or an Owner of that subscription.
To learn how to configure a security policy, see Setting security policies in Microsoft Defender for Cloud.