Share via

update error for data connector through sentinel or defender portal

Rod Lewis 5 Reputation points
2025-10-31T15:55:41.64+00:00

I keep getting this error when i try to update a data connector for Defender XDR. It used to work up until azure had an issue. Message- The workspace is enabled through the Microsoft Threat Protection Portal. Changes to the connector in Microsoft Sentinel are disabled. For more information https://aka.ms/primaryWorkspace

Microsoft Security | Microsoft Sentinel
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Prathista Ilango 670 Reputation points Microsoft Employee
    2025-11-25T16:33:00.1633333+00:00

    Hello Rod Lewis,

    Hope this issue is resolved. If not, please share the exact connector you are trying to update. This looks like Sentinel is integrated into Defender portal. In that case, data connector for Defender XDR is automatically setup.

    Refer to: https://learn.microsoft.com/en-us/azure/sentinel/microsoft-365-defender-sentinel-integration?tabs=defender-portal#defender-portal-integration

    Hope this helps!

    If you found the information above helpful, please Click Yes. This will assist others in the community who encounter a similar issue, enabling them to quickly find the solution and benefit from the guidance provided.

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.