Centralized view of detections and alerts across tenants
Lighthouse portal could help us to monitor customer tenants more efficiently, if we could see a overall list of new detections and alerts per customer tenant. This could be a trigger for deeper analysis conducted inside the tenant. Below is a list of different Microsoft detections, alerts and user reported content, in which I would personally see this function helpful.
- AAD Risky users
- AAD Risky sign-ins
- AAD Risk detections
- Office 365 Alerts
- Cloud App Security Alerts
- User reported MFA Frauds
Currently, some of these alerts from customer tenants can be sent to email addresses of our choice, ie. Office 365 Alerts if configured right. The centralized view will decrease the amount of manual configurations across all customer tenants and provide a way for technical and management departments to monitor customer tenants. With knowledge of different events across customer tenants, we can provide better IT service more efficiently.
This is an idea that has come up with our internal conversations as well. The value to the technician to provide a consolidated view of detections and alerts would be a great addition to Microsoft 365 Lighthouse. At the moment we are hyper focused on helping MSPs get security and management across all the customers setup consistently and following the best practices. This is something we will re-evaluate for the second half of the calendar year.
If you have not voted for this item and you think it is important, please vote for it! We will periodically review the votes and if we see a significant uptick in votes, we may prioritize it sooner.
This is exactly what I came here looking for, Lighthouse is great and all but being an MSP, centralizing all of this data not only from Microsoft 365, but all of our monitoring systems is extremely important to us. We need some ability to be able to get these events into our PSA system for action.
We have too many vendors who are too focused on providing a "Single pane of glass" which is great and all, but for us having to manage 20 of these "single panes" is simply not manageable.