Home

Office 365 tenancy not showing up to Add 2. Connect tenants to Azure sentinel

%3CLINGO-SUB%20id%3D%22lingo-sub-789292%22%20slang%3D%22en-US%22%3EOffice%20365%20tenancy%20not%20showing%20up%20to%20Add%202.%20Connect%20tenants%20to%20Azure%20sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-789292%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20we%20are%20trying%20to%20ingest%20Office%20365%20Activity%20logs%20to%20Azure%20Sentinel%20we%20cant%20see%20our%20Office%20365%20Tenancy.%20The%20user%20is%20GA%20and%20has%204433%20open.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20other%20considerations%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-789739%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20tenancy%20not%20showing%20up%20to%20Add%202.%20Connect%20tenants%20to%20Azure%20sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-789739%22%20slang%3D%22en-US%22%3E%3CP%3EHello%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F284679%22%20target%3D%22_blank%22%3E%40Fergie635%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESo%20the%20'add%20tenant'%20button%20is%20greyed%20out%3F%26nbsp%3B%20Have%20you%20met%20all%20the%20other%20requirements%20and%20refreshed%20as%20well%3F%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F125735i6B675AE8B5563941%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Annotation%202019-08-06%20103840.png%22%20title%3D%22Annotation%202019-08-06%20103840.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-790309%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20tenancy%20not%20showing%20up%20to%20Add%202.%20Connect%20tenants%20to%20Azure%20sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-790309%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20877px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F125756iD27B76CA8C86BA78%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22SentinelO365.png%22%20title%3D%22SentinelO365.png%22%20%2F%3E%3C%2FSPAN%3E%40Clive%20WatsonThe%20tenant%20does%20not%20show%20up%20when%20trying%20to%20add%20it.%20You%20can%20see%20that%20the%20workspace%20and%20solutions%20permissions%20are%20correct.%20The%20account%20is%20also%20a%20global%20admin%20and%20security%20admin%2C%20though%20the%20security%20admin%20should%20be%20redundant%20since%20it%20is%20a%20global%20admin.%20You%20can%20see%20that%20the%20O365%20solution%20is%20enabled%2C%20but%20the%20tenant%20is%20not%20appearing%20so%20that%20we%20can%20add%20it.%3C%2FP%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-790314%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20tenancy%20not%20showing%20up%20to%20Add%202.%20Connect%20tenants%20to%20Azure%20sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-790314%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F388005%22%20target%3D%22_blank%22%3E%40cjohnson%3C%2FA%3E%26nbsp%3B%20my%20only%20other%20thought%2C%20are%20you%20on%20E3%3F%26nbsp%3B%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsentinel%2Fconnect-office-365%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsentinel%2Fconnect-office-365%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-790360%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20tenancy%20not%20showing%20up%20to%20Add%202.%20Connect%20tenants%20to%20Azure%20sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-790360%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F239477%22%20target%3D%22_blank%22%3E%40Clive%20Watson%3C%2FA%3EYes%2C%20we%20use%20E3s.%20I%20can%20confirm%20that%20the%20O365%20Audit%20Logging%20is%20enabled.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hi

 

When we are trying to ingest Office 365 Activity logs to Azure Sentinel we cant see our Office 365 Tenancy. The user is GA and has 4433 open.

 

Any other considerations? 

 

 

4 Replies
Highlighted

Hello @Fergie635 

 

So the 'add tenant' button is greyed out?  Have you met all the other requirements and refreshed as well?

Annotation 2019-08-06 103840.png

 

 

Highlighted

SentinelO365.png@Clive WatsonThe tenant does not show up when trying to add it. You can see that the workspace and solutions permissions are correct. The account is also a global admin and security admin, though the security admin should be redundant since it is a global admin. You can see that the O365 solution is enabled, but the tenant is not appearing so that we can add it.

 
 
Highlighted
Highlighted

@Clive WatsonYes, we use E3s. I can confirm that the O365 Audit Logging is enabled.