Use Azure Policy at scale at an MSP
Hi there, I am starting to use Azure Lighthouse and Policy at a MSP. I want to use Azure Policy to manage all the delegated customer subscriptions. It seems that there is no built-in option to just push initiatives and policies to subscriptions in…
Navigating Azure Arc Integration for Windows Server 2012: Key Considerations and Potential Pitfalls
Urgent : We have an on-premises Windows Server 2012 serving as a service provider for a client's production application. We’re considering mapping it to Azure Arc to obtain Windows Update Extended Security Updates (ESU). Could you help us understand the…
Lighthouse Offer - I cannot add System Managed Identities to my customers Logic Apps
I have my roles delegated, I am in the correct AD groups on my tenant. However, when I got into a Logic App, and try to assign a System Assigned Managed Identity, I keep on getting the following error message: Failed to add Resource as Microsoft…
How to fix error when deploying managed service template
Hey, I'm having this problem after deleting my first successful attempt at creating a managed service template. After deleting my first template that validated successfully and was created, but later deleted because of a mistake. I am unable to validate…
Managing Customer Sentinel through Azure Lighthouse
Hi Experts, Please help. I have registered our customer on our Azure Lighthouse. I can see their Sentinel with data in it, but when I try to check data connectors, I am getting below errors: Can't see any connector connected, but when customer Global…
Azure Lighthouse - Assigning IAM permissions to users
Aloha, all: My MSP team and I have been using both Azure and M365 Lighthouse for a few months now. Now we're pretty comfortable with it, we've an ongoing project to remove all our native accounts from customer environments. Going through the benefits and…
cross tenant alerting
Hi,following on from this notification https://azure.microsoft.com/en-us/updates/sending-a-log-search-alert-with-cross-tenant-target-resource-will-no-longer-be-supported/ the part 'As of March 15, 2024, this behavior will change and sending a log search…
Azure Ligthouse User Access Admin group not working
In Azure AD I am assigned to an Azure Lighthouse group that is supposed to give me the 'User Access Administrator' role to all subscriptions from another tenant that is enrolled in Lighthouse. When I view my access on the subscriptions, I can see that my…
Lighthouse
Hello All, I gave Contributor role (on a subscription) to users via Lighthouse to manage a customer. The users get access with no problem to the customer subscription, can start and stop VM, create a resource group, start and stop backup, etc. The…
Is CSP status required required for using Azure LightHouse feature?
Is CSP status required required for using Azure LightHouse feature? Or can I as a shared Service Center also use Azure Lighthouse?
Cross-Workspace Auto-Disabled Analytics Query
Hello, We are using Azure lighthouse, and we are utilizing the cross-workspace query in analytics to run in all the tenant from master tenant. The Cross-workspace query running using the function, please find the function code below, union isfuzzy =…
SUBSCRIPTION I AM (RBAC)
Hello! I'm having a problem with Azure that I can't find a way to remove a Backup Contributor role in Azure. Case: I have an Azure subscription and recently assigned the Backup Contributor (RBAC) role to another Azure subscription. Now I want to…
As an MSP, can I use Lighthouse to connect to our client tenancies and create client user accounts, assign M365 Business Premium licences and apply consistent Intune policies across all the tenancies we manage on behalf of our clients?
Reading MS sales literature, its my understanding that Lighthouse is a management tool for IT MSP's to apply consistent security policies and device settings across all the client tenancies we manage. As an MSP, we would like to create client user…
Azure Lighthouse PowerShell
Is there any way to use PowerShell to interrogate Azure Lighthouse customers and their delegations? I have a need to get the Customer Name for the HomeTenantId of the subscriptions delegated to my tenant.
Kudu via Lighthouse delegated permissions
I have delegated access to Azure resources in a third-party tenant using Lighthouse, and this works fine via the portal; users receive the roles expected (typically Contributor). However, they are unable to access Kudu (at…
On Managend tenant Subscription required
Hello, we have create the offer via Azure Portal and within the custom tenant all definitions (roles, IDs etc.) are visible, but on our site under customer we don't see the customer. Currently in our tenant, no subscription exist. But we need one in our…
How a can Create a read only user for lighthouse sentinel workbooks?
Dears, I have a lighthouse tenant where I added multiple sentinel workspaces. However, I need to have a user where as soc analyst enable only to read dashboards for multiple clients or tenant? can someone help me with this? Regards,
Reporting on DKIM status across multiple tenants
I work at an MSP and we'd like to find a way to stay on top of our client DKIM status. We can do this one-by-one by logging in and going to the Defender admin center, of course, but that's a manual process. Is there anyway to get reporting for this? We'd…
MSSP Lighthouse to Client Lighthouse Integration?
Looking at the Azure Lighthouse use cases, i see it best integrates with Azure Sentinel. That is how the Managed Security Service Providers are building the solutions and services. However is there a possibility of integrating Managed Security Service…
Azure Lighthouse Playbook execution permission error
As a liaison between two companies, I have established Azure Lighthouse to delegate Sentinel management. However, I'm currently experiencing authorization issues with the delegation. The service provider can modify/assign/update incidents, but cannot run…