Forum Discussion
Solved
RE: Microsoft Sentinel workspaces with workspace manager
Hello,
When setting up the workspace manager, do you need to set up Lighthouse to manage member workspaces?
I am working with one tenant with multiple subscriptions that have their own workspace. I want to create a parent (managing) workspace with associated member ones.
From that scenario, I would like to know if it is possible to define a data connector in the parent (managing) workspace that could then be published to member workspaces?
Yes. My "parent" is in one Tenant, then I have some defined Groups, all the workspaces in those groups are in other Tenants (via Lighthouse). Some are multiple workspaces in different Subscriptions.
Manage multiple Microsoft Sentinel workspaces with workspace manager | Microsoft Learn
- Workspace Manager works within a Tenant e.g. Parent (Tenant a) --> Any workspace in Tenant A.
You can also use Parent (Tenant A) --> Lighthouse --> Workspaces (in Tenants B thru z).
It doesn't deploy data connectors though...- Hi Clive,
Thank you for the response.
So I can set up a managing/parent workspace in one subscription of Tenant A...
...then I can ADD member workspaces from other subscriptions?
It is the case you CANNOT have more than one workspace associated with one subscription?
JasonYes. My "parent" is in one Tenant, then I have some defined Groups, all the workspaces in those groups are in other Tenants (via Lighthouse). Some are multiple workspaces in different Subscriptions.
Manage multiple Microsoft Sentinel workspaces with workspace manager | Microsoft Learn
