Moving Sentinel to a different management group

Sándor Tőkési 181 Reputation points
2024-05-23T12:30:00.3566667+00:00

Hey folks,

I know that moving Sentinel from one subscription to a different one is not supported and can break things.

Could somebody tell me, whether moving a whole subscription that contains a Sentinel instance from one management group to another can break things or not? (beside permissions, which I'm okay with). Based on my experience, if I move my whole subscription to a different management group my Sentinel keeps working just fine.

But I would like to get some official confirmation or hear your experience as well.

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,023 questions
{count} votes

Accepted answer
  1. Akshay-MSFT 17,011 Reputation points Microsoft Employee
    2024-05-28T04:32:14.4566667+00:00

    @Sándor Tőkési

    Thanks for your time and patience. I was able to check this internally and got the following updates:

    Subscription which has sentinel resource can be moved to  another management group but the configuration/functionalities (can't be defined based upon the data connectors, workbooks etc. used ) could break. My recommendation here would be to start the migration on staging/test env do a through testing and then proceed with production.

    If you don't have any further queries and the suggestion works as per your business need. Please "Accept the answer (Yes)" and "share your feedback ". This will help us and others in the community as well.

    Thanks,

    Akshay Kaushik

    0 comments No comments

0 additional answers

Sort by: Most helpful