Unable to add Office 365 as data source

[Shijuc]

Dear All, We have been trying to enable Azure sentinel for our tenant and for our customers. While we are able to add data connector with Azure AD and on premises workloads to the sentinel, we were unable to add Office 365 (exchange online & SharePoint online) to the sentinel. It throws an error "Unauthorized to apply changes , License is invalid" . We have followed MS article and we have a mix of Office 365 E3, E1 and business essentials (total license close to 250). We also verified if the unified audit log ingestion is enabled, which is also true. Attached is the error snap, any help would be highly appreciated.

[#2]

@Shijuc I've seen this before. In some cases it resolved itself after a period of time, but in most of those cases required opening a support ticket.

[#3]

@Rod_Trent Follow-up. This is being looked into. Stay tuned.

[#4]

@Shijuc Same problem here, note the misspelled "Unautherized to apply changes" message.

It was ok before, we just moved to a new subscription and recreated the Sentinel configuration. Trying to add O365 to the old Sentinel results in the same problem. Of course the license is valid.

[#5]

@Rod_Trent  Thanks for your response, is this an issue product team looking into?

[#6]

@Shijuc Yes.

[#7 · Accepted solution]

@Rod_Trent This should now be resolved.

[#8]

@Rod_Trent Yes, it works now.

[#9]

@AdiGrio& @Rod_Trent 

Thanks for the information. But, It does not work for us still and giving the same error. Our licenses are 25 M365 E3 and rest are E1 or business essentials (approx. 300). Anything to do with that?

[#10]

@AdiGrio 

This works for us too now. Coincidentally there was a GA permission revoke in the back end recently. GA permission is now reinstated.  This time it was because of permission.  Thank you all for the support.