Forum Discussion

PrashTechTalk's avatar
PrashTechTalk
Brass Contributor
May 11, 2021

Azure Sentinel Automation (Preview) - Issue with Permission assignment

Hi @AzureSentinel Team,   I believe this is a bug unless there is any reason to do so.   At Azure Sentinel Automation (Preview) when tried to assign permission for logic app I am getting the erro...
Javier-Soriano's avatar
Javier-Soriano
Icon for Microsoft rankMicrosoft
Jun 11, 2021
are you working in a Lighthouse setup?
  • PrashTechTalk's avatar
    PrashTechTalk
    Brass Contributor
    Jun 11, 2021

    Javier-Soriano Hi Javier,   Yes it is though Azure Lighthouse setup.

    • Javier-Soriano's avatar
      Javier-Soriano
      Icon for Microsoft rankMicrosoft
      Jun 14, 2021
      Ok, that requires additional permissions. You need to grant Azure Sentinel Automation Contributor permissions to the Azure Security Insights app in the service provider tenant, to the RG where the playbooks are in the customer tenant. So basically you need to include this additional authorization in your Azure Lighthouse delegation.

      Regards
      • AliAhmedDar's avatar
        AliAhmedDar
        Copper Contributor
        Oct 23, 2023

        Javier-Soriano 

        I am managing a customer's Sentinel and want to run response playbooks from under the Incidents tab.

        None of the resources are in my sentinel, infact I do not have any sentinel deployed. Still do I need to delegate Automation Contributor role to the Azure Security Insights app ? 

        If yes, I do not see it the Enterprise applications menu

Resources