Prerequisites

To perform the onboarding of Attic Sentinel at end customers, the following prerequisites apply:

• A Global Administrator account in the end customer's tenant
• A CSP subscription in the end customer's tenant, where the Global Admin has Owner rights
• (Temporarily) Attic adds the Addon to the end customer so that it becomes available in the Partner Portal.

Performing Onboarding

1. Go to https://partner.zolder.io
2. Go to Applied Solutions
3. Select the end customer you want to onboard.

If there is no Premium Solution yet, this must first be added and onboarded.

4. After opening the Solution, open the Onboarding tab
5. Perform the step Azure Audit Logs

By doing this, you agree that additional charges may apply for stored logging. By default, these costs are very limited. If extra, non-standard logs are onboarded, the costs may increase.

 

6. Perform the step Enable Resource Providers (logged in to the end customer's tenant)

This enables several settings on the CSP subscription. In this step, the Subscription ID must be provided.

 

7. Perform the step Install Microsoft Sentinel (logged in to the end customer's tenant)

This step takes you to the Azure Portal, directly to the Attic offer. Start the deployment by clicking the Create button. Go through the Wizard and adjust settings as needed.

After forwarding, the Create button will become available here:

In the wizard, several settings can be specified:

• Resource group: this can be any name you choose.
• Region: the Azure region where Sentinel will be deployed.
• Application Name: this can also be any name you choose.
• Managed Resource Group: pre-filled. This can also be any name you choose.

Optionally, in the Options tab, data retention can be increased. Be aware that this affects Azure costs (up to 90 days is free).

Then click the Review + Create button to start the deployment. Attic will automatically detect that the deployment has completed; at that point, the next step will be made available.

8. Perform the step Enable Data Connectors (logged in to the end customer's tenant)

This enables the required data connectors.

9. Onboarding complete.