Home

Office 365 tenancy not showing up to Add 2. Connect tenants to Azure sentinel

%3CLINGO-SUB%20id%3D%22lingo-sub-789292%22%20slang%3D%22en-US%22%3EOffice%20365%20tenancy%20not%20showing%20up%20to%20Add%202.%20Connect%20tenants%20to%20Azure%20sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-789292%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20we%20are%20trying%20to%20ingest%20Office%20365%20Activity%20logs%20to%20Azure%20Sentinel%20we%20cant%20see%20our%20Office%20365%20Tenancy.%20The%20user%20is%20GA%20and%20has%204433%20open.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20other%20considerations%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-789739%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20tenancy%20not%20showing%20up%20to%20Add%202.%20Connect%20tenants%20to%20Azure%20sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-789739%22%20slang%3D%22en-US%22%3E%3CP%3EHello%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F284679%22%20target%3D%22_blank%22%3E%40Fergie635%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESo%20the%20'add%20tenant'%20button%20is%20greyed%20out%3F%26nbsp%3B%20Have%20you%20met%20all%20the%20other%20requirements%20and%20refreshed%20as%20well%3F%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F125735i6B675AE8B5563941%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Annotation%202019-08-06%20103840.png%22%20title%3D%22Annotation%202019-08-06%20103840.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-790309%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20tenancy%20not%20showing%20up%20to%20Add%202.%20Connect%20tenants%20to%20Azure%20sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-790309%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20877px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F125756iD27B76CA8C86BA78%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22SentinelO365.png%22%20title%3D%22SentinelO365.png%22%20%2F%3E%3C%2FSPAN%3E%40Clive%20WatsonThe%20tenant%20does%20not%20show%20up%20when%20trying%20to%20add%20it.%20You%20can%20see%20that%20the%20workspace%20and%20solutions%20permissions%20are%20correct.%20The%20account%20is%20also%20a%20global%20admin%20and%20security%20admin%2C%20though%20the%20security%20admin%20should%20be%20redundant%20since%20it%20is%20a%20global%20admin.%20You%20can%20see%20that%20the%20O365%20solution%20is%20enabled%2C%20but%20the%20tenant%20is%20not%20appearing%20so%20that%20we%20can%20add%20it.%3C%2FP%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-790314%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20tenancy%20not%20showing%20up%20to%20Add%202.%20Connect%20tenants%20to%20Azure%20sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-790314%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F388005%22%20target%3D%22_blank%22%3E%40cjohnson%3C%2FA%3E%26nbsp%3B%20my%20only%20other%20thought%2C%20are%20you%20on%20E3%3F%26nbsp%3B%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsentinel%2Fconnect-office-365%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsentinel%2Fconnect-office-365%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-790360%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20tenancy%20not%20showing%20up%20to%20Add%202.%20Connect%20tenants%20to%20Azure%20sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-790360%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F239477%22%20target%3D%22_blank%22%3E%40Clive%20Watson%3C%2FA%3EYes%2C%20we%20use%20E3s.%20I%20can%20confirm%20that%20the%20O365%20Audit%20Logging%20is%20enabled.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Fergie635
New Contributor

Hi

 

When we are trying to ingest Office 365 Activity logs to Azure Sentinel we cant see our Office 365 Tenancy. The user is GA and has 4433 open.

 

Any other considerations? 

 

 

4 Replies

Hello @Fergie635 

 

So the 'add tenant' button is greyed out?  Have you met all the other requirements and refreshed as well?

Annotation 2019-08-06 103840.png

 

 

SentinelO365.png@Clive WatsonThe tenant does not show up when trying to add it. You can see that the workspace and solutions permissions are correct. The account is also a global admin and security admin, though the security admin should be redundant since it is a global admin. You can see that the O365 solution is enabled, but the tenant is not appearing so that we can add it.

 
 

@Clive WatsonYes, we use E3s. I can confirm that the O365 Audit Logging is enabled.

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
46 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
30 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies