SOLVED

Multiple M365 tenants in sentinel

%3CLINGO-SUB%20id%3D%22lingo-sub-2350384%22%20slang%3D%22en-US%22%3EMultiple%20M365%20tenants%20in%20sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2350384%22%20slang%3D%22en-US%22%3E%3CP%3EFirst%20of%20all%2C%20thanks%20in%20advance.%3C%2FP%3E%3CP%3ECan%20you%20think%20of%20a%20way%20to%20manage%20multiple%20M365%20subscriptions%20in%20the%20same%20Sentinel%3F%3C%2FP%3E%3CP%3EUsing%20the%20default%20connector%20I%20can%20only%20indicate%20one%20M365%20subscription%2C%20and%20the%20client%20has%20several.%3C%2FP%3E%3CP%3EThanks%20for%20everything%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2350722%22%20slang%3D%22en-US%22%3ERe%3A%20Multiple%20M365%20tenants%20in%20sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2350722%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F269368%22%20target%3D%22_blank%22%3E%40kinomakino%3C%2FA%3E%26nbsp%3BIn%20the%20same%20Azure%20Sentinel%20environment%3F%26nbsp%3B%20No.%26nbsp%3B%20I%20think%20the%20closest%20would%20be%20to%20have%20multiple%20Azure%20Sentinel%20instances%20(one%20per%20M365%20subscription)%20and%20then%20use%20Azure%20Lighthouse%20to%20manage%20them%20all%20in%20one%20Azure%20Sentinel%20environment.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2382920%22%20slang%3D%22en-US%22%3ERe%3A%20Multiple%20M365%20tenants%20in%20sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2382920%22%20slang%3D%22en-US%22%3EThank%20my%20Lord%20!!%3CBR%20%2F%3E%3CBR%20%2F%3EIt%20is%20the%20way%20we%20have%20it%20working.%3CBR%20%2F%3E%3CBR%20%2F%3EAll%20the%20best%3C%2FLINGO-BODY%3E
Occasional Contributor

First of all, thanks in advance.

Can you think of a way to manage multiple M365 subscriptions in the same Sentinel?

Using the default connector I can only indicate one M365 subscription, and the client has several.

Thanks for everything

2 Replies
best response confirmed by kinomakino (Occasional Contributor)
Solution

@kinomakino In the same Azure Sentinel environment?  No.  I think the closest would be to have multiple Azure Sentinel instances (one per M365 subscription) and then use Azure Lighthouse to manage them all in one Azure Sentinel environment. 

Thank my Lord !!

It is the way we have it working.

All the best