Forum Discussion
Log Analytics into Azure Lighthouse
- Sep 27, 2020
SebastiaanR I never even thought of a scenario where the managing tenant wouldn't have a subscription! Add even an Azure Free Account sub to it and see if that works.
Hi SoniaCuff
Same error in my case. I gave Sentinel Contributor and Logs Analytics Reader (also tried w/ Contributor) access to the same PrincipalId through Lighthouse. I can see alerts/incidents but not perform queries or see tables from the managing tenant.
Managed tenant did enable Microsoft.Insights. Any idea on how to debug this?
- SebastiaanRSep 27, 2020Brass Contributor
milkmix_ Thanks for this feedback. This, however, did not resolve my problem.
The tenant I am accessing the customer subscriptions from does not have its own subscription associated, and the registered providers are added at subscription level, so not entirely sure how to then go about that.
Is this perhaps something I am doing wrong? Do I need to have a subscription (albeit even an unused one) in the managing tenant for this to work?
- SoniaCuffSep 27, 2020
Microsoft
SebastiaanR I never even thought of a scenario where the managing tenant wouldn't have a subscription! Add even an Azure Free Account sub to it and see if that works.
- Benjamin GrausMar 08, 2022Brass Contributor
Hi SoniaCuff,
maybe you can help me out with some similar situation.
We have a managing tenant without subscription.
I saw the updated docs https://docs.microsoft.com/en-us/azure/lighthouse/how-to/monitor-at-scale with the section to add New-AzADServicePrincipal for the managing tenant without subscription.
But we cannot get it to work. We always get the following:
We were then able to set it like this:
After that we onboarded a customer. But when we try to access some logs we still get the error:
So it seems that we will forcely need a subscription within the managing tenant?
Any hints?
Thanks for your help
Regards,
Ben