Kate_Smiththanks for this info! I'm running into a problem that I cannot figure out how to... well... figure out.
Failed to determine members of SqlServerTarget (server name 'xyz.database.windows.net', server location 'abc.database.windows.net'): Login failed for user '<token-identified principal>'. The server is not currently configured to accept this token.
I believe this error is saying the refresh credential cannot login to enumerate the databases in the target group's servers. I have created the refresh credential as instructed, and have added the proper permissions for that credential in the master database on each of the target servers. I have the servers set up with Auditing to write to a log analytics server, but I am not seeing anything being logged for these failed logins, nor do I know what <token-identified principal> is or how to find out what it is.
Any tips on how I should proceed?