Forum Discussion
gsk256
Jan 26, 2022Copper Contributor
Unable to connect Azure Devops Repo to customer Sentinel
Hello all! I trying to setup the new Microsoft Sentinel Repos in an MSSP environment. I have a Devops repo in my tenant, and Lighthouse access to a test 'customer' tenant. I've tried all of the fo...
Nan_Zang
Microsoft
Jun 15, 2023Currently, Sentinel Repository supports ADO multi-tenancy configuration through guest account.
This is the instruction how to set up Tenan B sentinel to be imported content from Tenant A ADO.
Steps:
- ADO preparation: Make sure there is a user account
- userA@TenantA can be used in TenantA. userA should have project admin permission on ADO.
- Get the repo link and branch name ready and it will be used later to set up the connection. Repo: https://dev.azure.com/sentinel-eco-devs/Sentinel-ContentAsCode/_git/sentinel-content-2 Branch: main
- Go to https://dev.azure.com and make sure sign-out on all the vsms instances.
- Create guest account and grant the permission: log into Tenant B using Tenant B admin credential
- Invite userA@TenantA as a guest account.
- Go to the resource group where Sentinel instance is hosted in, grant userA@tenantA the Owner and Sentinel Contributor permission to the resource group.
- Set up repo connection:
- Open a private browser session.
- Log-in to https://portal.azure.com using userA@TenantA credential. Make sure switch the directory TenantB.
- Go to Sentinel instance of Tenant B, go to repository blade and set up connection.
- When authorize window pops up, make sure enter userA@tenantA credential and authorize the Sentinel app as guided.
- Click the following hyperlink “Click here” and enter the repository url and branch name from step
- You should be able to create the connection.