Microsoft Security Tech Accelerator
Dec 06 2023, 07:00 AM - 12:00 PM (PST)
Microsoft Tech Community

Windows Events Forward from another subscription

Copper Contributor

Hi all,

 

I have created a Sentinel connector 'Windows Events Forward' where I specified Azure VMs for data collection in a subscription I have access to.

There is another subscription in the tenant - which I don't have access to and therefore cannot select VMs for data collection from Sentinel connector. 

Anyone knows what needs to be done following least privilege principle so I can select VMs from that subscription under sentinel connector? 

0 Replies