SecurityInsight settings · Settings > Sign-in & Azure resources
Storage account resource group
| Key | SI_StorageResourceGroup |
|---|---|
| Where | Settings > Sign-in & Azure resources > Storage |
| Type | Text |
| Default | Same resource group as the workspace (or the data collection rules) |
| Edition | Community |
What it does
Names the Azure resource group that holds the SecurityInsight storage account. Setup creates the account and grants its permissions there; a collection run only checks that the account is there.
When set
Setup looks the storage account up, creates it and grants permissions in this resource group; a run that does not find it there says so in one line and creates nothing. A wrong value makes setup create a second account in the wrong place.
When blank or default
Left blank, the default applies: Same resource group as the workspace (or the data collection rules)
Risk and how to reverse it
Affects how the jobs sign in or which Azure resources they use. A wrong value stops the affected jobs at their next run (nothing is changed or deleted); a broader identity or right gives the jobs more access than they need. Reversible: correct it and run again.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Only when your storage account lives in a different resource group from the workspace; setup normally writes it.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack