Forum Discussion

Francesco47's avatar
Francesco47
Copper Contributor
Mar 25, 2020

Azure Sentinel Office 365 Data Connectors

Hello Community!

I have a problem with Office 365 Data Connector in Azure Sentinel.

The source status is connected and I have a Security Administrator Role in my Tenant.

I tried to add another tenant ID in the configuration panel, but now I can't add it anymore and the button "Save" is disappeared. 

1) Do you know how could I solve this problem?

2) Is there a method to disconnect and reconnect this Office 365 connector?

 

Any help from you will be highly appreciated!

Thank you!

 

  • Francesco47 The ability to add multiple tenants was deprecated this month in lieu of upcoming features that align better with customer data privacy and security.

     

    From the connector page (https://docs.microsoft.com/en-us/azure/sentinel/connect-office-365😞

     

    If you already connected multiple tenants in a previously supported version of the Office 365 connector in Azure Sentinel, you will be able to view and modify which logs you collect from each tenant. You will not be able to add additional tenants, but you can remove previously added tenants.

    • Joseph-Abraham's avatar
      Joseph-Abraham
      Brass Contributor

      Rod_Trent Do you know what these privacy and security concerns were and why it wasn't left up to the customer to decide upon the same.

    • Francesco47's avatar
      Francesco47
      Copper Contributor

      Rod_Trent Thank you for your prompt reply.

      I would like to restore my old tenant but I can not do that even if I don't have any tenant connected now.

      It seems that there is no possibility to disconnect a single source connector. 

      Can you confirm this or help us in order to find a solution?

      Thank you for your support!

       

      • Rod_Trent's avatar
        Rod_Trent
        Icon for Microsoft rankMicrosoft

        Francesco47 Just to get a clearer understanding...

         

        Would you say you deleted Azure Sentinel before disconnecting the Office 365 Data Connector and it seems to now assume its still connected?

Resources