How to add in Sentinel a tenant from Office 365?

Michael Deacon 21 Reputation points
2020-10-13T20:12:48.367+00:00

The options for MSPS and CSPs to add new tenants to their own Sentinel workspace seems to be a bit of mystery, unless you are using Azure Lighthouse.

This is a very common scenario, where the customer has only an Office 365 subscription and no other Azure subscription: Azure Lighthouse onboarding would not work them in this case.

...so how can we onboard this customer to our own managed Sentinel workspace, as the option to add tenants seems to have been removed earlier in the year.

SharePoint
SharePoint
A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
9,209 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,227 questions
Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
931 questions
{count} votes

Accepted answer
  1. JoyZ 18,031 Reputation points
    2020-10-15T05:55:20.137+00:00

    Hi @Michael Deacon ,

    Currently the ability to add multiple tenants in Azure Sentinel has been deprecated.

    Quote from Microsft:

    If you had previously connected multiple tenants to Azure Sentinel, using an older version of the Office 365 connector which supported this, you will be able to view and modify which logs you collect from each tenant. You will not be able to add additional tenants, but you can remove previously added tenants.

    For better data privacy and security, it' s necessary to use Azure Lighthouse for cross- and multi-tenant management.

    https://learn.microsoft.com/en-us/azure/lighthouse/how-to/manage-sentinel-workspaces

    Thank you for your understanding.


    If an Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful