Set up multiple workspaces and tenants in Microsoft Sentinel

When you planned your deployment, you determined whether a multiple workspace architecture is relevant for your environment. If your environment requires multiple workspaces, you can now set them up as part of your deployment. For more information, see Prepare for multiple workspaces and tenants in Microsoft Sentinel.

In this article, you learn how to set up Microsoft Sentinel to extend across multiple workspaces and tenants. This article is part of the Deployment guide for Microsoft Sentinel.

Options for using multiple workspaces

If you've determined and set up your environment to extend across workspaces, you can:

• Manage and monitor cross-workspace architecture: Query and analyze your data across workspaces and tenants.
• Manage multiple workspaces with workspace manager: Centrally manage multiple workspaces within one or more Azure tenants.

Next steps

In this article, you learned how to set up Microsoft Sentinel to extend across multiple workspaces and tenants.

Enable User and Entity Behavior Analytics (UEBA)