May 26, 20241 min read

Microsoft Sentinel Implementation a Deep Dive - Part 2: Microsoft Sentinel Deployment

RBAC Assignment for Microsoft Sentinel

In the previous article, we have seen how to create a workspace and deploy Microsoft Sentinel.

In this Article, we will see how we can assign an RBAC role which is required for Sentinel.

Learn more about Roles and permissions for working in Microsoft Sentinel at https://learn.microsoft.com/azure/sentinel/roles

Go to Subscription where Microsoft Sentinel and Workspace deployed. Click on Subscription

Select Access Control(IAM)

Click on Add --> Add role assignment

Search for Microsoft Sentinel Contributor and select Members

Click on Select Members

Click on Review + assign

Now we have provided the Microsoft Sentinel Contributor Role to the user account that going to manage Sentinel.

Go to the Log Analytics Workspace

Select Usage and estimated costs

Click on Data retention

Click on OK