You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sentinel/quickstart-onboard.md
+9-25Lines changed: 9 additions & 25 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -32,8 +32,10 @@ After you connect your data sources, choose from a gallery of expertly created w
32
32
33
33
-**Permissions**:
34
34
35
-
- To enable Microsoft Sentinel, you need contributor permissions to the subscription in which the Microsoft Sentinel workspace resides.
36
-
- To use Microsoft Sentinel, you need either contributor or reader permissions on the resource group that the workspace belongs to.
35
+
- To enable Microsoft Sentinel, you need **contributor** permissions to the subscription in which the Microsoft Sentinel workspace resides.
36
+
37
+
- To use Microsoft Sentinel, you need either **contributor** or **reader** permissions on the resource group that the workspace belongs to.
38
+
37
39
- Additional permissions may be needed to connect specific data sources.
38
40
39
41
-**Microsoft Sentinel is a paid service**. For more information, see [About Microsoft Sentinel](https://go.microsoft.com/fwlink/?linkid=2104058) and the [Microsoft Sentinel pricing page](https://azure.microsoft.com/pricing/details/azure-sentinel/)
@@ -42,29 +44,11 @@ For more information, see [Pre-deployment activities and prerequisites for deplo
42
44
43
45
### Geographical availability and data residency
44
46
45
-
- Microsoft Sentinel can run on workspaces in most [GA regions of Log Analytics](https://azure.microsoft.com/global-infrastructure/services/?products=monitor) except the China and Germany (Sovereign) regions. New Log Analytics regions may take some time to onboard the Microsoft Sentinel service.
46
-
47
-
- Data generated by Microsoft Sentinel, such as incidents, bookmarks, and analytics rules, may contain some customer data sourced from the customer's Log Analytics workspaces. This Microsoft Sentinel-generated data is saved in the geography listed in the following table, according to the geography in which the workspace is located:
48
-
49
-
| Workspace geography | Microsoft Sentinel-generated data geography |
50
-
| --- | --- |
51
-
| United States<br>India | United States |
52
-
| Europe<br>France | Europe |
53
-
| Australia | Australia |
54
-
| United Kingdom | United Kingdom |
55
-
| Canada | Canada |
56
-
| Japan | Japan |
57
-
| Asia Pacific | Asia Pacific * |
58
-
| Brazil | Brazil * |
59
-
| Norway | Norway |
60
-
| Africa | Africa |
61
-
| Korea | Korea |
62
-
| Germany | Germany |
63
-
| United Arab Emirates | United Arab Emirates |
64
-
| Switzerland | Switzerland |
65
-
|
66
-
67
-
\* Single-region data residency is currently provided only in the Southeast Asia region (Singapore) of the Asia Pacific geography, and in the Brazil South (Sao Paulo State) region of the Brazil geography. For all other regions, customer data can be stored anywhere in the geography of the workspace where Sentinel is onboarded.
47
+
- Microsoft Sentinel can run on workspaces in most [regions where Log Analytics is generally available](https://azure.microsoft.com/global-infrastructure/services/?products=monitor). Regions where Log Analytics is newly available may take some time to onboard the Microsoft Sentinel service.
48
+
49
+
- See [Data residency in Azure](https://azure.microsoft.com/global-infrastructure/data-residency/) for information on [Geos and regions](https://azure.microsoft.com/global-infrastructure/data-residency/#select-geography) and on [where customer data is stored](https://azure.microsoft.com/global-infrastructure/data-residency/#more-information).
50
+
51
+
- Single-region data residency is currently provided only in the Southeast Asia (Singapore) region of the Asia Pacific geography, and in the Brazil South (Sao Paulo State) region of the Brazil geography.
68
52
69
53
> [!IMPORTANT]
70
54
> - By enabling certain rules that make use of the machine learning (ML) engine, **you give Microsoft permission to copy relevant ingested data outside of your Microsoft Sentinel workspace's geography** as may be required by the machine learning engine to process these rules.
0 commit comments