96 questions with Azure Lighthouse tags

Sort by: Updated
0 answers

Subscription move left dangling role assignments that interfere with Lighthouse delegation

We had the following setup in Azure: Two tenants: Tenant A, Tenant B. One subscription in Tenant A. Role assignment for this subscription that authorized a security group in Tenant A with the Owner role. What we planned to: Move the subscription…

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
asked 2025-12-04T09:04:33.11+00:00
Lóránd Balog 0 Reputation points
2 answers

Billing model for Log Analytics via Azure Lighthouse

I understand Azure Lighthouse itself is free. What’s unclear is how Log Analytics/Monitor costs flow depending on where the workspace lives, who runs queries, and how data is ingested when access is via delegated (Lighthouse) roles.

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
asked 2025-11-13T08:00:34.0666667+00:00
Loh Wai Kit 0 Reputation points
commented 2025-11-14T05:18:59.4466667+00:00
Suchitra Suregaunkar 3,545 Reputation points Microsoft External Staff Moderator
1 answer

Do we have a way to retrieve all tenants which are in our lighthouse via scripting ?

I am trying to use some scripts to retrieve all tenants I have in my lighthouse.microsoft.com using my CLI. I could not find any documents supporting it.

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
asked 2025-11-05T14:24:40.9233333+00:00
Gottam Rohith Reddy 0 Reputation points
answered 2025-11-05T17:03:45.3466667+00:00
Bharath Y P 2,560 Reputation points Microsoft External Staff Moderator
1 answer

Intermittent issues administering end-users with GDAP relationships via Lighthouse

We are leveraging lighthouse to administer our clients, however every now and again our technicians are unable to perform certain tasks via Lighthouse even though we have those permissions via the GDAP relationship as well as the Lighthouse permissions…

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
asked 2025-08-25T19:32:08.2533333+00:00
Joseph Hendrie 0 Reputation points
answered 2025-08-26T08:47:53.15+00:00
Suchitra Suregaunkar 3,545 Reputation points Microsoft External Staff Moderator
2 answers One of the answers was accepted by the question author.

Deployment of resource type MachineLearning fails using Lighthouse

We are deploying a large number of Azure resources to customer subscription using AZ Lighthouse. The ARM templates work well when executed with a member/guest user directly in the subscription, but do not when we use resource delegation with…

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
asked 2025-05-16T12:06:53.06+00:00
Ivelin Andreev 25 Reputation points
edited a comment 2025-06-21T06:47:21.05+00:00
Don van Meel | Twyzer 40 Reputation points
1 answer

How do I solve "The registration definition 'eeb6d891-559e-5554-9f5f-b0f6954430c8' not allowed to use the 'dfe4b198-ec21-4e8d-b62f-543cfc923071' as ManagedByTenantId."?

I'm unable to find any reason nor documentation to explain this error message when attempting to onboard a customer { "code": "InvalidTemplateDeployment", "details": [ { "code":…

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
asked 2025-05-19T22:31:10.1066667+00:00
Benjamin Roedell 0 Reputation points
commented 2025-05-21T20:22:30.0566667+00:00
Vinod Pittala 6,395 Reputation points Microsoft External Staff Moderator
3 answers

Azure Ligthouse User Access Admin group not working

In Azure AD I am assigned to an Azure Lighthouse group that is supposed to give me the 'User Access Administrator' role to all subscriptions from another tenant that is enrolled in Lighthouse. When I view my access on the subscriptions, I can see that my…

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,057 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2023-05-16T15:45:33.9466667+00:00
ObnoxiousRicotta 5 Reputation points
commented 2025-05-21T09:33:09.6066667+00:00
Marco Voorwinden | Twyzer 0 Reputation points
0 answers

Broken management of Defender EASM via Azure Lighthouse

We try to manage Defender EASM from a customer using Azure Lighthoure. We have Contributor Rights to the Customer Subscription using Azure Lighthouse ARM Template. Everything in the Customer Subscription can be managed fine, but management of Defender…

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
asked 2025-04-08T11:05:56.09+00:00
Sascha Reuter 50 Reputation points
commented 2025-05-19T18:34:19.59+00:00
Srinivasa Reddy Jaggavarapu 1,570 Reputation points Moderator
1 answer One of the answers was accepted by the question author.

How do I resolve the homeTenantId to a tenant display name?

I'm new to Azure, so it might be a stupid question, but here goes. My company uses Lighthouse to manage multiple customers. I'm trying to get information from Azure via the CLI az. In my web GUI I can 'Switch Directory' and get 2 directories. I also get…

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
asked 2025-05-14T12:02:52.8033333+00:00
Ivo Palli 20 Reputation points
accepted 2025-05-19T09:56:43.6533333+00:00
Ivo Palli 20 Reputation points
0 answers

Lighthouse offer and Managed Identities permissions

Hi, I am trying to assign the Contributor role over a Lighthouse managed subscription to a System Managed Identity (an Automation account). According to the documentation: "The User Access Administrator role is supported, but only for the limited…

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
asked 2025-04-08T07:41:05.5633333+00:00
Alessandro Pecci 25 Reputation points
commented 2025-04-23T12:27:20.03+00:00
Anonymous
2 answers One of the answers was accepted by the question author.

Can a customer's same resource group be managed by multiple MSSP in Azure Lighthouse?

A customer is currently migrating from another MSSP Lighthouse to our Lighthouse. I'm wondering how to make the migration smoother. It would be great if one customer could subscribe to multiple Lighthouses. If not, they will need to migrate out and then…

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
asked 2025-04-17T05:27:51.0233333+00:00
Wesley 46 Reputation points
accepted 2025-04-17T09:42:36.55+00:00
Wesley 46 Reputation points
1 answer One of the answers was accepted by the question author.

Which Entra Role is Required to Manage Users in Microsoft 365 Lighthouse?

Hello all, I read this article: https://learn.microsoft.com/en-us/microsoft-365/lighthouse/m365-lighthouse-overview-of-permissions?view=o365-worldwide It states that I need an Entra Role to manage (search, view, etc.) users in Lighthouse. However, I…

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
asked 2025-04-03T12:34:07.0766667+00:00
Gas-Andrew Chedid 20 Reputation points
accepted 2025-04-15T10:25:54.0066667+00:00
Gas-Andrew Chedid 20 Reputation points
0 answers

Need to delegate a subscription to another tenant.

I have a subscription in one tenant (lets call it Tenant A) and a Dynamics Sandbox environment hosted in a different tenant (Tenant B). I am trying to delegate my subscription from Tenant A to Tenant B so that I can use the same subscription to implement…

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
asked 2025-03-25T07:19:48.72+00:00
Deb, Adrika 0 Reputation points
commented 2025-03-28T05:24:23.2966667+00:00
Vinod Pittala 6,395 Reputation points Microsoft External Staff Moderator
1 answer One of the answers was accepted by the question author.

How to send different tenant's Azure WAF log to tenant with Sentinel Configured?

Hello, I have 2 tenants. A tenant : WAF configured (Sentinel x) B tenant : Sentinel configured( WAF x) I would like to analyze A's logs in tenant B's sentinel. How can I configure? I think I should configure Azure lighthouse, is it right? If not,…

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
Azure Web Application Firewall
Microsoft Security | Microsoft Sentinel
asked 2023-06-02T07:38:39.8566667+00:00
mara7 206 Reputation points
commented 2025-03-05T14:14:41.5766667+00:00
KateGokul-3672 0 Reputation points
1 answer

Azure Monitor in External Tenant

Hi, We are setting up an Entra External ID tenant to house external users of a web app that we host. I presently stream our internal diagnostics logs to an Event Hub in our workforce tenant and then to an IDR. I found this article and was successful at…

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,819 questions
Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
asked 2025-02-06T18:36:03.27+00:00
Ken Korczynski 5 Reputation points
edited the question 2025-02-25T07:44:40.0733333+00:00
Givary-MSFT 35,681 Reputation points Microsoft Employee Moderator
1 answer One of the answers was accepted by the question author.

Azure Lighthouse Service REST API

We have many subscriptions, and some of them are managed by the lighthouse service. We would like to know which of them are managed by lighthouse using only rest api. How can we find out?

Azure API Management
Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
2,589 questions
Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
asked 2025-02-11T21:32:23.2166667+00:00
Aleksandr Tsaregorodtsev 20 Reputation points
accepted 2025-02-14T09:09:34.4+00:00
Aleksandr Tsaregorodtsev 20 Reputation points
1 answer One of the answers was accepted by the question author.

Issues with Role-Based Deletion Restriction & Locks in Azure Lighthouse

I need support for an Azure Lighthouse environment. I set up a test environment with two Azure accounts—one as a service provider and the other as a customer. The Azure Lighthouse environment was successfully set up on both accounts. I have two security…

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
asked 2025-01-30T14:22:13.5866667+00:00
Tahira Nawaz 110 Reputation points
accepted 2025-02-12T11:01:33.0133333+00:00
Tahira Nawaz 110 Reputation points
1 answer One of the answers was accepted by the question author.

How can I use client dashboards with azure lighthouse?

Hello, I work for a service provider company and I need help with monitoring my clients dashboards. I need to have multiple client dashboards on my azure tenant, I did connect our tenant (service provider) with each one of our client's tenants with the…

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,819 questions
Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
asked 2025-01-21T12:07:34.3133333+00:00
Marcos 40 Reputation points
commented 2025-01-23T08:29:33.5533333+00:00
Marcos 40 Reputation points
1 answer One of the answers was accepted by the question author.

Is it possible to use Lighthouse with AME/PME tenant?

Is it possible to use Lighthouse with AME/PME tenant? i.e. project multiple customers resources to AME or PME?

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
asked 2024-12-11T16:20:24.9966667+00:00
AU 20 Reputation points Microsoft Employee
commented 2025-01-10T11:01:33.1133333+00:00
AU 20 Reputation points Microsoft Employee
1 answer

As a CSP, did you find an "efficient" solution for managing customer access? (Azure + M365)

Hello, As a Cloud Service Provider (CSP), we are in search of a comprehensive solution that can fully support our needs in managing our customers' Azure and Microsoft 365 tenants. Our customers may utilize Azure, Microsoft 365, or both, and we need a…

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
9,668 questions
Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
96 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Partner Center | Other
asked 2024-11-12T17:10:22.38+00:00
JND 20 Reputation points
commented 2024-11-28T10:52:21.6366667+00:00
Raja Pothuraju 43,340 Reputation points Microsoft External Staff Moderator