Forum Discussion

JMSHW0420's avatar
JMSHW0420
Iron Contributor
Dec 05, 2024

Using the New-AzSentinelDataConnector cmdlet

I have tried using the New-AzSentinelDataConnector cmdlet to create or update a data connector. I have not fully gotten this solution working, trying to enable the Microsoft Entra ID data connector....
automation
data collection
Log Data
G_Wilson3468's avatar
G_Wilson3468
Iron Contributor
Dec 12, 2024

I would verify that you have the following prerequisites fulfilled:

1. Entra ID P1 or P2 license for the sign-in logs ingest. 
2. You must have Microsoft Sentinel Contributor role in workspace
3. You must have Security Contributor role in the tenant you want to stream from (or equivalent permissions)
4. Read/Write for Entra ID diagnostics to see connection status
5. I would also make sure the Entra ID solution is installed from Content Hub. 

Hope this helps.

G.