SecurityInsight settings · Settings > Sign-in & Azure resources
Service principal object id
| Key | SI_SPN_ObjectId |
|---|---|
| Where | Settings > Sign-in & Azure resources |
| Type | Text |
| Default | Looked up from the app id at run start |
| Edition | Community |
What it does
Object id (not app id) of the service principal, used to grant it rights on data collection rules and storage.
When set
If it cannot be found, infrastructure preparation is skipped and new data collection rules may lack the ingest permission. A wrong id grants rights to the wrong principal.
When blank or default
Left blank, the default applies: Looked up from the app id at run start
Risk and how to reverse it
Affects how the jobs sign in or which Azure resources they use. A wrong value stops the affected jobs at their next run (nothing is changed or deleted); a broader identity or right gives the jobs more access than they need. Reversible: correct it and run again.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Only when the automatic lookup fails because the signing-in identity cannot read service principals.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack