Guest User Access to an Identity portal

[tipper1510]

Hi,

I have two dev tenants and doing some proof of concept work on defender for Identity.

I have a guest user (from tenant 1) in tenant 2, and that user needs to be able to access the identity portal for tenant 2.

So i use the following url - https://portal.atp.azure.com/?tid=<tenent 2 id>

I select the guest user account and its states the user haven't the correct permissions.

I have added that user to the newly created AAD group 'Azure ATP <tenant id> user. Plus the user has 'Security Operator' and Azure Sentinel Responder on tenant 2.

Is something else required to allow this guest user access?

Any help would be much appreciated.

Regards,

Tim

[#2]

The url you are using with the tid parameter will try to navigate you to the tenant's workspace, and not to a specific workspace. the guest user must not have permissions to its own tenant's workspace, thus failing to get it.
To login to the workspace where it has permissions you need to navigate to the workspace url first by its name like tenant2.atp.azure.com