Microsoft Secure Tech Accelerator
Apr 13 2023, 07:00 AM - 12:00 PM (PDT)
Microsoft Tech Community
SOLVED

Sentinel doesn't accept my Security Administrator role

Contributor

Hi,

I have the Security Administrator role, but still, I am met by this, when trying to enable data connectors:

Larssen92_0-1635228305303.png

 

I have found this Q/A (https://docs.microsoft.com/en-us/answers/questions/260835/new-azure-tenant-not-recognising-global-ad...), and tried to remove and add role, without success. I have waited for 24 hours, and nothing changed.

Any ideas?

 

2 Replies
best response confirmed by Larssen92 (Contributor)
Solution
Please check you Access Control (IAM) for the Log Analytics workspace, you need WRITE access (Log Analytics contributor role). These settings work top to bottom, so you need WRITE to the Workspace 1st, then the next two, you need all to have green ticks.
Okay, a bit confusing, but you are right, that was the problem. Thank you!