top of page

Microsoft Sentinel Implementation a Deep Dive - Part 2: Microsoft Sentinel Deployment

Previous Articles
 

RBAC Assignment for Microsoft Sentinel

In the previous article, we have seen how to create a workspace and deploy Microsoft Sentinel.

In this Article, we will see how we can assign an RBAC role which is required for Sentinel.

Learn more about Roles and permissions for working in Microsoft Sentinel at https://learn.microsoft.com/azure/sentinel/roles


Go to Subscription where Microsoft Sentinel and Workspace deployed. Click on Subscription

Sentinel-2-1

Select Access Control(IAM)

Sentinel-2-2

Click on Add --> Add role assignment

Sentinel-2-3

Search for Microsoft Sentinel Contributor and select Members

Sentinel-2-4

Click on Select Members

Sentinel-2-5

Click on Review + assign

Sentinel-2-7

Now we have provided the Microsoft Sentinel Contributor Role to the user account that going to manage Sentinel.

Configuration of Data Retention

Go to the Log Analytics Workspace

Sentinel-2-8

Select Usage and estimated costs

Sentinel-2-9

Click on Data retention

Sentinel-2-10

Click on OK

Sentinel-2-11
 
Next Articles
7 views0 comments
bottom of page