Microsoft Secure Tech Accelerator
Apr 13 2023, 07:00 AM - 12:00 PM (PDT)
Microsoft Tech Community

New Blog Post | Reusing Microsoft Sentinel Watchlists Across Tenants



Reusing Microsoft Sentinel Watchlists Across Tenants - Azure Cloud & AI Domain Blog (


Here’s a common question (just received it again today, in fact).

Q: Is it possible to do cross-tenant retrieval of watchlists?

A: Retrieving Watchlist content through API isn’t available yet and Repositories doesn’t support Watchlists. So, here’s suggestions of a couple things you could do:

[1] Query the Watchlist and export the results to a .csv. Then import the Watchlist into the other tenant…

[2] Maintain a single .csv somewhere externally (blob or local storage) that gets updated in some fashion and then imported directly into each tenant (possibly continuously through automation) using Bulk update using the API.


0 Replies