diff --git a/detections/cloud/o365_email_access_by_security_administrator.yml b/detections/cloud/o365_email_access_by_security_administrator.yml
index 92f1ab9639..a269591e3f 100644
--- a/detections/cloud/o365_email_access_by_security_administrator.yml
+++ b/detections/cloud/o365_email_access_by_security_administrator.yml
@@ -38,7 +38,7 @@ tags:
     - Victim
   - name: src_user
     type: User
-    role:	
+    role:
     - Victim
   - name: signature_id
     type: Other