M365 A3 CSP - Azure Entitlement?

[foofighterjim]

So, I am currently setting up a conditional access rule in Report-only mode to make sure it is targeting the correct behaviour patterns. The problem is that when I go to view the report I get a message saying that Log Analytics integration is not enabled. Looking online for solutions just says to create a new workspace from scratch in Azure but when I do this I am asked to setup an Azure trial??

 

After much back and forth with MS support for a week, they finally say that the P1 license we have as part of our M365 A3 CSP license is for ADD only and does not cover any other elements / subscriptions in Azure. Trying to research this over the weekend I couldn't actually find anything about an Azure P1 license, I just got pages and pages of results about ADD P1. Could anyone else confirm if MS are right or if they are just making it up (it wouldn't be the first time)? I thought a P1 subscription was just a P1 subscription, not that M365 A3 P1 was just for the ADD element of Azure.

[Katy]

The only P1 is Azure AD P1, which is included in M365 A3 and A5. When you are looking at Log Analytics you need a subscription to create the workbook and store any redirected logs - not included in P1 or P2. Depending on what feature it is, some include free Log Analytics and the data storage for them is also free, but you still need an Azure subscription to run them. At my last school I set up the trial and got the school card linked to turn it into pay-as-you-go as our monthly spend was <1p using it for Windows Update for Business log analytics solution.

[foofighterjim]

The only P1 is Azure AD P1, which is included in M365 A3 and A5. When you are looking at Log Analytics you need a subscription to create the workbook and store any redirected logs - not included in P1 or P2. Depending on what feature it is, some include free Log Analytics and the data storage for them is also free, but you still need an Azure subscription to run them. At my last school I set up the trial and got the school card linked to turn it into pay-as-you-go as our monthly spend was <1p using it for Windows Update for Business log analytics solution.

 

Thanks for this, I guess I'd better setup the free trial for now then. I doubt I'll get approval to put the school card on there for PAYG but it can't hurt to ask. Hopefully I should be able to get most of my Conditional Access testing done by the summer anyway.

[simpsonj]

In the same boat, did you convince the school to put it on the school credit card?

 

It's pretty annoying this can't be paid for another way, or setup without requiring a payment card...

 

Or another question, do you find the log analytics useful, or could you have put in the policies without the reports?

[foofighterjim]

Well, I am still talking to Microsoft about this as I did get the card put on and I activated the free trial but every time I try to create a resource I am prompted to setup a free trial (which I have already done), so I'm basically stuck in a loop and MS aren't exactly being quick or particularly helpful, I believe I am now speaking to a 6th different agent about it.

 

I'll definitely be reviewing this requirement in line with our licensing next year, rather than PAYG, if they can ever get it to work that is.

[simpsonj]

That sounds, erm, less than ideal...

 

Do you know what product to ask for to add it to a licence? I'm mildly terrified about accidentally locking myself out of O365 by setting up the wrong rule.