SecurityInsight settings · Settings > Collection scope & limits

Azure VM to device tier linking off

Key	SI_DisableEndpointAzureCorrelation
Where	Settings > Collection scope & limits
Type	On / off
Default	Off: an Azure VM takes the tier of the matching endpoint device.
Edition	Community
Confirmation	SecurityInsight asks you to confirm before it is switched on.

What it does

Stops the Azure engine from giving an Azure VM or Arc machine the same tier as its matching Defender device.

When enabled

When on, Azure VMs and Arc machines keep their own Azure-side tier and lose the link to their endpoint record, so the same machine can show different tiers in the two views.

When disabled

an Azure VM takes the tier of the matching endpoint device.

Risk and how to reverse it

Azure VMs and Arc machines lose the link to their endpoint record, so one machine can show two different tiers. Reversible at once (the next run links them again).

Requires

Nothing else.