Azure Lighthouse: Do we need to deploy our own Active directory, LogAnalytics and Sentinel to manage those from customer environment?

Question

Hello
We are deploying a new Azure instance to activate the Azure Lighthouse solution only.
The purpose is to manage our customer's Sentinel, Defender and LogAnalytics solutions.
My question is, once the Lighthouse configured, do we have to enable our own Azure Sentinel, Defender, LogAnalytics to manage those at the customer side?

Thanks

Answer 1

You do not need your own instance of Sentinel or Defender for Cloud to manage these services in a customer's tenant using Lighthouse.

That said you might want them for several reasons. Defender for Cloud helps keep your subscriptions and tenant secure. It is also common for MSSPs to develop solutions in their own Sentinel instance. For example, custom rules, workbooks, and playbooks.

Also be aware that there are certain tasks that cannot be performed over Lighthouse. Like activating Sentinel connectors. Having your own instance as a comparison or model instance can be helpful.