Forum Discussion
Azure Sentinel Workbook & Azure Dashboard Sharing to external B2B guest users
- Mar 30, 2020
So rather than Share, use EDIT and then Advanced Edit, to download a copy of the JSON (or ARM) to the user. Then get them to import the workbook. https://github.com/CliveW-MSFT/KQLpublic/blob/master/README.md for Import / Export info
PrashTechTalk Just a thought but have you tried to copy the Azure Sentinel workbooks to the Log Analytics workbooks and see if that works?
- PrashTechTalkApr 06, 2020Brass Contributor
GaryBushey - Hi Gary,
I tried your solution works completely fine only when the dashboard is built on customer tenant else they will not see the cross tenant data. Sadly i had to opt for building workloads on customer tenant for this reason, Also RBAC for dashboard only is not available and had to grant reader access.
Thanks.
- GaryBusheyApr 06, 2020Bronze Contributor
PrashTechTalk OK, I see what you are trying to do now. Have you looked at Lighthouse where you can grant the customers the rights into your tenant?
- PrashTechTalkMar 31, 2020Brass Contributor
GaryBushey - Thankyou & Appreciate your response..I will give a try. Because the objective is to share B2B guests and that i do not want to assign RBAC at subscription level or resource group level i think its not possible to achieve. As per Microsoft documentation the user should be part of the subscription.
- CliveWatsonMar 30, 2020Silver Contributor
So rather than Share, use EDIT and then Advanced Edit, to download a copy of the JSON (or ARM) to the user. Then get them to import the workbook. https://github.com/CliveW-MSFT/KQLpublic/blob/master/README.md for Import / Export info
- PrashTechTalkMar 31, 2020Brass Contributor
CliveWatson @ Thanks & Appreciate your response. This is a brilliant approach but the condition is B2B user should only read the workbook not own it completely or have feasibility to import it & modify.
Please correct me if i am wrong..
I am trying to share Azure Sentinel Workbook or Azure Dashboard with read only access to B2B users but i should make sure the actual workload reside in my tenant.