Forum Discussion

Shijuc's avatar
Shijuc
Copper Contributor
Apr 06, 2020
Solved

Unable to add Office 365 as data source

Dear All, We have been trying to enable Azure sentinel for our tenant and for our customers. While we are able to add data connector with Azure AD and on premises workloads to the sentinel, we were unable to add Office 365 (exchange online & SharePoint online) to the sentinel. It throws an error "Unauthorized to apply changes , License is invalid" . We have followed MS article and we have a mix of Office 365 E3, E1 and business essentials (total license close to 250). We also verified if the unified audit log ingestion is enabled, which is also true. Attached is the error snap, any help would be highly appreciated.

9 Replies

  • AdiGrio's avatar
    AdiGrio
    Brass Contributor
    Apr 07, 2020

    Shijuc Same problem here, note the misspelled "Unautherized to apply changes" message.

     

    It was ok before, we just moved to a new subscription and recreated the Sentinel configuration. Trying to add O365 to the old Sentinel results in the same problem. Of course the license is valid.

  • Rod_Trent's avatar
    Rod_Trent
    Icon for Microsoft rankMicrosoft
    Apr 07, 2020

    Shijuc I've seen this before. In some cases it resolved itself after a period of time, but in most of those cases required opening a support ticket.