{"id":33158,"date":"2024-05-24T15:43:07","date_gmt":"2024-05-24T13:43:07","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/?p=33158"},"modified":"2024-05-24T15:43:10","modified_gmt":"2024-05-24T13:43:10","slug":"azure-lighthouse-setup","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/","title":{"rendered":"Azure Lighthouse setup"},"content":{"rendered":"\n

Azure Lighthouse is a service that enables you to do multitenant management with scalability, high automation and enhanced governance. Azure Lighthouse makes it possible to manage tenants in a provider\/customer relationship without having to log in every time you want to modify your customer tenant.
One of the best part of Azure Lighthouse is that the service is free to use, you will not be charged for it! <\/p>\n\n\n\n

How does Azure Lighthouse work?<\/h2>\n\n\n\n

Azure Lighthouse will connect one provider tenant to multiple customer tenants. Each of the connections can be configured as you want to fit the principle of least privilege by giving rights over subscriptions or resource groups.
For Azure Lighthouse to work all you need are:
– User, groups or service principals in the provider tenant
– RBAC roles to apply in the customer tenant
And that’s all! These two elements will be combined in a template created in the provider tenant and then integrated in the customer tenant.<\/p>\n\n\n\n

Prerequisites <\/h2>\n\n\n\n

Before setting up Azure lighthouse we need to verify that we have:
– Two <\/strong>Azure tenants (one will be the provider, the other one the customer)
– Admin rights in the provider tenant
– a valid subscription and to be its Owner<\/strong> in the customer tenant. <\/p>\n\n\n\n

In my example the provider <\/strong>tenant will have black banners as Azure menu and the customer<\/strong> one blue banners.<\/p>\n\n\n\n

Provider tenant configuration<\/h2>\n\n\n\n

Let’s start with the provider setup. <\/p>\n\n\n\n

First, go to your Azure Entra ID and create a new group. We will use this group to assign users to our lighthouse solution so all of your users do not have permissions over your customer tenant. <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Once the group is created, we can navigate to a specific part of Azure Lighthouse. In your search bar please look for “Customers” and select the following:<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

We then want to create a template to give us some rights over the customer tenants we will link later.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

In the template fill the form with the name that suits you then click on “Add Authorization”<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

In the “Add Authorization” window we want to set the permission we will have over our customer tenants. For this example I’ll use the contributor rights. Do not forget to select the principal type as “Group” and then to select the group we created earlier.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

We select “Permanent” rights here, the “Eligible” access type requires Azure Lighthouse to be configured with Entra ID Privileged Identity Management. This is only accessible in with Premium 2 Entra license.<\/p>\n\n\n\n

Once your template is ready, click on “View template”<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Then download it with the corresponding button.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

With this last step, the provider configuration is done.
The JSON template that we just created can be used as many times as we want to as long as you want to have the same accesses to your customer resources.
We can now jump to the customer tenant and do its configuration as well. <\/p>\n\n\n\n

Customer tenant configuration<\/h2>\n\n\n\n

Before jumping in the Azure Lighthouse configuration, we must check if the subscription has the required providers registered. <\/p>\n\n\n\n

In your subscription in details, go into “Resource providers” and search for “ManagedServices”<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

If the provider is not registered, please do the registration and continue with the configuration afterwards.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Search for “lighthouse” to access the service <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

In the Lighthouse page, click on “View service provider offers”<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Then select “Service providers offers” and “Add via template”<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Upload the template we created earlier<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Select the subscription you want to link with the provider tenant then click on “Review + create”<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

And then click on “Create”<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Wait for the deployment to finish, it should take no more than a few minutes <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

We are done with the customer configuration. Now it is time to check the link between the two tenants<\/p>\n\n\n\n

Configuration control<\/h2>\n\n\n\n

In the customer tenant, go back to the lighthouse panel, click again on “View service provider offers” and look for delegations. You should see the newly created delegations details. <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Now in the provider tenant, under “Customers” you should also see the new link between the two tenants. <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Still in the provider tenant, under the subscriptions you should now see the customer subscription details.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

As we are only contributor and not owner of the customer subscription, we can not manage user rights on it. We can check by clicking on the customer subscription in the same panel and navigating to “Access control”.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

This concludes our Azure lighthouse setup.<\/p>\n","protected":false},"excerpt":{"rendered":"

Azure Lighthouse is a service that enables you to do multitenant management with scalability, high automation and enhanced governance. Azure Lighthouse makes it possible to manage tenants in a provider\/customer relationship without having to log in every time you want to modify your customer tenant. One of the best part of Azure Lighthouse is that […]<\/p>\n","protected":false},"author":90,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[3271,955],"tags":[1338,3364,135],"type_dbi":[],"class_list":["post-33158","post","type-post","status-publish","format-standard","hentry","category-azure","category-cloud","tag-azure","tag-azure-lighthouse","tag-cloud"],"acf":[],"yoast_head":"\nAzure Lighthouse setup - dbi Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Azure Lighthouse setup\" \/>\n<meta property=\"og:description\" content=\"Azure Lighthouse is a service that enables you to do multitenant management with scalability, high automation and enhanced governance. Azure Lighthouse makes it possible to manage tenants in a provider\/customer relationship without having to log in every time you want to modify your customer tenant. One of the best part of Azure Lighthouse is that […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2024-05-24T13:43:07+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-24T13:43:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/05\/image-7-1024x711.png\" \/>\n<meta name=\"author\" content=\"Adrien Devaux\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Adrien Devaux\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/\"},\"author\":{\"name\":\"Adrien Devaux\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/80889303f4b56d4e0d3637582fa1f705\"},\"headline\":\"Azure Lighthouse setup\",\"datePublished\":\"2024-05-24T13:43:07+00:00\",\"dateModified\":\"2024-05-24T13:43:10+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/\"},\"wordCount\":734,\"commentCount\":0,\"image\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/05\/image-7-1024x711.png\",\"keywords\":[\"Azure\",\"Azure Lighthouse\",\"Cloud\"],\"articleSection\":[\"Azure\",\"Cloud\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/\",\"name\":\"Azure Lighthouse setup - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/05\/image-7-1024x711.png\",\"datePublished\":\"2024-05-24T13:43:07+00:00\",\"dateModified\":\"2024-05-24T13:43:10+00:00\",\"author\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/80889303f4b56d4e0d3637582fa1f705\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/#primaryimage\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/05\/image-7.png\",\"contentUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/05\/image-7.png\",\"width\":1097,\"height\":762},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.dbi-services.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Azure Lighthouse setup\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/80889303f4b56d4e0d3637582fa1f705\",\"name\":\"Adrien Devaux\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/bc472273cc9807635382578d8967f63a3602eb717ab361bcf2c8ee9a59b682b0?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/bc472273cc9807635382578d8967f63a3602eb717ab361bcf2c8ee9a59b682b0?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/bc472273cc9807635382578d8967f63a3602eb717ab361bcf2c8ee9a59b682b0?s=96&d=mm&r=g\",\"caption\":\"Adrien Devaux\"},\"url\":\"https:\/\/www.dbi-services.com\/blog\/author\/adriendevaux\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Azure Lighthouse setup - dbi Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/","og_locale":"en_US","og_type":"article","og_title":"Azure Lighthouse setup","og_description":"Azure Lighthouse is a service that enables you to do multitenant management with scalability, high automation and enhanced governance. Azure Lighthouse makes it possible to manage tenants in a provider\/customer relationship without having to log in every time you want to modify your customer tenant. One of the best part of Azure Lighthouse is that […]","og_url":"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/","og_site_name":"dbi Blog","article_published_time":"2024-05-24T13:43:07+00:00","article_modified_time":"2024-05-24T13:43:10+00:00","og_image":[{"url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/05\/image-7-1024x711.png","type":"","width":"","height":""}],"author":"Adrien Devaux","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Adrien Devaux","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/"},"author":{"name":"Adrien Devaux","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/80889303f4b56d4e0d3637582fa1f705"},"headline":"Azure Lighthouse setup","datePublished":"2024-05-24T13:43:07+00:00","dateModified":"2024-05-24T13:43:10+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/"},"wordCount":734,"commentCount":0,"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/05\/image-7-1024x711.png","keywords":["Azure","Azure Lighthouse","Cloud"],"articleSection":["Azure","Cloud"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/","url":"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/","name":"Azure Lighthouse setup - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/#primaryimage"},"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/05\/image-7-1024x711.png","datePublished":"2024-05-24T13:43:07+00:00","dateModified":"2024-05-24T13:43:10+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/80889303f4b56d4e0d3637582fa1f705"},"breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/#primaryimage","url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/05\/image-7.png","contentUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/05\/image-7.png","width":1097,"height":762},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/azure-lighthouse-setup\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Azure Lighthouse setup"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/80889303f4b56d4e0d3637582fa1f705","name":"Adrien Devaux","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/bc472273cc9807635382578d8967f63a3602eb717ab361bcf2c8ee9a59b682b0?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/bc472273cc9807635382578d8967f63a3602eb717ab361bcf2c8ee9a59b682b0?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/bc472273cc9807635382578d8967f63a3602eb717ab361bcf2c8ee9a59b682b0?s=96&d=mm&r=g","caption":"Adrien Devaux"},"url":"https:\/\/www.dbi-services.com\/blog\/author\/adriendevaux\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/33158","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/90"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=33158"}],"version-history":[{"count":5,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/33158\/revisions"}],"predecessor-version":[{"id":33293,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/33158\/revisions\/33293"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=33158"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=33158"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=33158"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=33158"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}