SecurityInsight settings · Settings > Sign-in & Azure resources
Staging storage account
| Key | SI_StorageAccount |
|---|---|
| Where | Settings > Sign-in & Azure resources > Storage |
| Type | Text |
| Default | Not set: collection engines stop with an error |
| Edition | Community |
What it does
The storage account the collection engines use for staging data, caches, the shared catalog and the identity ledger.
When set
Required for endpoint, identity, Azure and public IP collection. It is reached only with the signed-in identity, which needs the Storage Blob, Queue and Table Data Contributor roles on it. Changing it starts staging and caches from empty.
When blank or default
Left blank, the default applies: Not set: collection engines stop with an error
Risk and how to reverse it
Affects how the jobs sign in or which Azure resources they use. A wrong value stops the affected jobs at their next run (nothing is changed or deleted); a broader identity or right gives the jobs more access than they need. Reversible: correct it and run again.
Requires
Read by: azure, endpoint, identity, publicip.
Recommended
Keep the default. Change it when: Set at install; change only when moving to a new storage account.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack