@GossiTheDog I'vejust read that mail. Didn't we learn from Qualys a few days ago that CSAM is not a good acronym in cybersecurity?
Also according to Microsoft itself that role doesn't exist but a CSM does.
Edit: Role does exist. Had a typo in my search. Also Microsoft calls CSAM mostly CSEAI
Edit2: Apparently role is only in use for customers with "Unified Support" contracts do other users get a different notification or none at all?