Apr 06 2020 11:39 PM
Dear All, We have been trying to enable Azure sentinel for our tenant and for our customers. While we are able to add data connector with Azure AD and on premises workloads to the sentinel, we were unable to add Office 365 (exchange online & SharePoint online) to the sentinel. It throws an error "Unauthorized to apply changes , License is invalid" . We have followed MS article and we have a mix of Office 365 E3, E1 and business essentials (total license close to 250). We also verified if the unified audit log ingestion is enabled, which is also true. Attached is the error snap, any help would be highly appreciated.
Apr 07 2020 05:02 AM
@Shijuc I've seen this before. In some cases it resolved itself after a period of time, but in most of those cases required opening a support ticket.
Apr 07 2020 08:49 AM
@Rod_Trent Follow-up. This is being looked into. Stay tuned.
Apr 07 2020 06:11 PM
@Shijuc Same problem here, note the misspelled "Unautherized to apply changes" message.
It was ok before, we just moved to a new subscription and recreated the Sentinel configuration. Trying to add O365 to the old Sentinel results in the same problem. Of course the license is valid.
Apr 07 2020 09:25 PM
@Rod_Trent Thanks for your response, is this an issue product team looking into?
Apr 09 2020 01:30 AM
Thanks for the information. But, It does not work for us still and giving the same error. Our licenses are 25 M365 E3 and rest are E1 or business essentials (approx. 300). Anything to do with that?
Apr 13 2020 11:36 PM
This works for us too now. Coincidentally there was a GA permission revoke in the back end recently. GA permission is now reinstated. This time it was because of permission. Thank you all for the support.