Forum Discussion
Azure Sentinel Multi tenant/MSSP Playbooks
Hi, Just to add some background before I ask the question. We have about 8 customers that we have deployed a CSP Subscription and put Sentinel on. We have then used Lighthouse to grant us acc...
Hi AdamJones
I work at an MSSP aswell, using Sentinel to protect our customers.
You can assign Playbooks that live in our own tenant, to alerts in a customers tenant. You just need to make sure that your users have Logic App Contributor on the Logic Apps in your own tenant. This way, when they go to Setinel from a customer, they should see your own Logic Apps.
You need to watchout for Authentication however. If you want to use one master image, you need to create a multi tenant app registration which has permissions to isolate devices in the tenants of all your customers.
Does this answer your questions?
