Possible to Connect Azure Sentinel across different Directories?

%3CLINGO-SUB%20id%3D%22lingo-sub-1626088%22%20slang%3D%22en-US%22%3EPossible%20to%20Connect%20Azure%20Sentinel%20across%20different%20Directories%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1626088%22%20slang%3D%22en-US%22%3E%3CP%3EOur%20environment%20is%20as%20follows%3A%3C%2FP%3E%3CP%3EDirectory%20A%3A%26nbsp%3B%3CBR%20%2F%3EServes%20as%20the%20AD%20authority%20over%20our%20Exchange%2FSharePoint%2FOneDrive%20environment%20only.%3C%2FP%3E%3CP%3EHas%20a%20Subscription%20but%20only%20for%20the%20purpose%20of%20providing%20a%20Sentinal%20Workspace.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDirectory%20B%3A%26nbsp%3B%3C%2FP%3E%3CP%3ETotally%20separate%20AD%20Authority%20which%20manages%20our%20Dev%20resources%20and%20multiple%20Subscriptions.%3CBR%20%2F%3EHas%20Sentinel%20installed%20on%20a%20Test%20Subscription%2FWorkspace.%3C%2FP%3E%3CP%3EIf%20possible%20would%20prefer%20to%20aggregate%20ingested%20data%20to%20the%20above%20mentioned%20workspace.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20this%20even%20possible%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1626280%22%20slang%3D%22en-US%22%3ERe%3A%20Possible%20to%20Connect%20Azure%20Sentinel%20across%20different%20Directories%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1626280%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F778624%22%20target%3D%22_blank%22%3E%40BagelBytez%3C%2FA%3E%26nbsp%3B%3CBR%20%2F%3EIs%20this%20potentially%20solved%20by%20using%20LightHouse%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1627205%22%20slang%3D%22en-US%22%3ERe%3A%20Possible%20to%20Connect%20Azure%20Sentinel%20across%20different%20Directories%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1627205%22%20slang%3D%22en-US%22%3EYes%2C%20we%20use%20Lightouse%20for%20this%20scenario%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-sentinel%2Fusing-azure-lighthouse-and-azure-sentinel-to-investigate-attacks%2Fba-p%2F1043899%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-sentinel%2Fusing-azure-lighthouse-and-azure-sentinel-to-investigate-attacks%2Fba-p%2F1043899%3C%2FA%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Our environment is as follows:

Directory A: 
Serves as the AD authority over our Exchange/SharePoint/OneDrive environment only.

Has a Subscription but only for the purpose of providing a Sentinal Workspace.

 

Directory B: 

Totally separate AD Authority which manages our Dev resources and multiple Subscriptions.
Has Sentinel installed on a Test Subscription/Workspace.

If possible would prefer to aggregate ingested data to the above mentioned workspace.

 

Is this even possible?

2 Replies
Highlighted

@BagelBytez 
Is this potentially solved by using LightHouse?