SecurityInsight settings · Settings > Sign-in & Azure resources
Service principal app id
| Key | SI_SPN_AppId |
|---|---|
| Where | Settings > Sign-in & Azure resources > How SecurityInsight signs in |
| Type | Text |
| Default | Taken from SpnClientId or the platform; if none, managed identity |
| Edition | Community |
What it does
Application (client) id of the service principal the engines sign in as when not using managed identity.
When set
Decides which app registration reads data and ingests results; that app needs the required Graph, Azure and Log Analytics permissions. Without it, no service principal sign-in happens.
When blank or default
Left blank, the default applies: Taken from SpnClientId or the platform; if none, managed identity
Risk and how to reverse it
Affects how the jobs sign in or which Azure resources they use. A wrong value stops the affected jobs at their next run (nothing is changed or deleted); a broader identity or right gives the jobs more access than they need. Reversible: correct it and run again.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Set during setup when you use a service principal; change when moving to a different app.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack