Forum Discussion

Copper Contributor

Nov 23, 2019

Workspace reconfiguration via ARM or Powershell?

I have 150ish subscriptions that are already configured with workspaces. I need to create a new workspace and have all the VMs get reconfigured. I've tested that this will work given time via ma...

nathanmitten

Copper Contributor

Nov 25, 2019

Hi yoavfrancis thanks for the reply.

I think I may just need some clarification.

Is the POST doing anything different than the following would?

Set-AzSecurityWorkspaceSetting -Name "default" -Scope "/subscriptions/$subscriptionid" -WorkspaceId "/subscriptions/$subscriptionid/resourcegroups/$rg_name/providers/microsoft.operationalinsights/workspaces/$workspace_name"

If not, then are you saying if the workspace is still default (aka was never changed) it will reconfigure the VMs, but if it was changed to a custom workspace, running the above powershell or API will not reconfigure the VMs?

Thanks,

Nathan

yoavfrancis

Former Employee

Dec 03, 2019

nathanmitten Apologies for the delay.

Set-AzSecurityWorkspaceSetting controls in which workspace to save the data, in case auto provisioning was enabled (with Set-AzSecurityAutoProvisioningStatus). In case you're using auto provisioning with managed workspaces ('default' workspaces), no need to call Set-AzSecurityWorkspaceSetting at all.

Neither of the above PowerShell cmdlets take care of reconnecting the VMs in case you move from auto provisioning on default workspace to auto provisioning on a central workspace. In order to reconnect the VMs you'll need to explicitly make a POST call to the URI I mentioned in my last post:

https://management.azure.com/subscriptions/SUBSCRIPTION_ID/providers/Microsoft.Security/workspaceSettings/default/connect?api-version=2017-08-01-preview

Thanks,

Yoav