SecurityInsight settings · Settings > Sign-in & Azure resources
Azure subscription for ingestion
| Key | SI_AzSubscriptionId |
|---|---|
| Where | Settings > Sign-in & Azure resources |
| Type | Text |
| Default | Taken from the workspace resource id, else SubscriptionId |
| Edition | Community |
What it does
The Azure subscription in which the engines look up and create the data collection endpoint and rules.
When set
Scopes all endpoint and rule lookups and resource creation to this subscription. A wrong value makes ingestion refuse to post or create resources in the wrong subscription.
When blank or default
Left blank, the default applies: Taken from the workspace resource id, else SubscriptionId
Risk and how to reverse it
Affects how the jobs sign in or which Azure resources they use. A wrong value stops the affected jobs at their next run (nothing is changed or deleted); a broader identity or right gives the jobs more access than they need. Reversible: correct it and run again.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Only when the ingestion resources live in a different subscription than the workspace.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack