Skip to content

Commit b53eada

Browse files
committed
improve(wiz): make Sentinel service principal instructions work for any Wiz tenant
STEP 1 referenced a single example Application ID that only applied to one specific Wiz tenant. Instructions now point each customer to their own tenant's Application (client) ID, found on the Microsoft Sentinel integration setup screen in Wiz, so the setup process works consistently across any Wiz tenant. The rest of the flow (manual az CLI command + "Deploy the Wiz RBAC role" ARM template button) is unchanged. Also quotes the WIZ_APP_ID placeholder in the CLI snippet so it doesn't get parsed as shell redirection, and keeps the STEP 1 title consistent across both files.
1 parent e92b6ae commit b53eada

2 files changed

Lines changed: 3 additions & 3 deletions

File tree

Solutions/Wiz/Data Connectors/WizSentinel.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -94,7 +94,7 @@
9494
"instructionSteps": [
9595
{
9696
"title": "STEP 1 - Get the Wiz service principal object ID",
97-
"description": "ARM cannot resolve a Microsoft Entra object, so you supply the Wiz service principal **object ID**. In Azure Cloud Shell (no local install required; creating the service principal needs permission to register enterprise applications in Microsoft Entra ID) run the line below — it prints the object ID, creating the service principal first if it does not yet exist in your tenant:\n\n```bash\naz ad sp show --id ae69b94b-e367-4660-9b35-cfb4b5966728 --query id -o tsv 2>/dev/null \\\n || az ad sp create --id ae69b94b-e367-4660-9b35-cfb4b5966728 --query id -o tsv\n```"
97+
"description": "ARM cannot resolve a Microsoft Entra object, so you supply the Wiz service principal **object ID**. This app registration is unique to your Wiz tenant — find your **Application (client) ID** on the Microsoft Sentinel integration setup screen in Wiz (**Settings > Integrations > Add > Microsoft Sentinel**), then substitute it for `<WIZ_APP_ID>` below. In Azure Cloud Shell (no local install required; creating the service principal needs permission to register enterprise applications in Microsoft Entra ID) run the line below — it prints the object ID, creating the service principal first if it does not yet exist in your tenant:\n\n```bash\nWIZ_APP_ID=\"<WIZ_APP_ID>\" # from the Wiz Microsoft Sentinel integration setup screen\naz ad sp show --id \"$WIZ_APP_ID\" --query id -o tsv 2>/dev/null \\\n || az ad sp create --id \"$WIZ_APP_ID\" --query id -o tsv\n```"
9898
},
9999
{
100100
"title": "STEP 2 - Grant Wiz the RBAC",

Solutions/Wiz/Package/mainTemplate.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -181,7 +181,7 @@
181181
},
182182
"instructionSteps": [
183183
{
184-
"description": "ARM cannot resolve a Microsoft Entra object, so you supply the Wiz service principal **object ID**. In Azure Cloud Shell (no local install required; creating the service principal needs permission to register enterprise applications in Microsoft Entra ID) run the line below — it prints the object ID, creating the service principal first if it does not yet exist in your tenant:\n\n```bash\naz ad sp show --id ae69b94b-e367-4660-9b35-cfb4b5966728 --query id -o tsv 2>/dev/null \\\n || az ad sp create --id ae69b94b-e367-4660-9b35-cfb4b5966728 --query id -o tsv\n```",
184+
"description": "ARM cannot resolve a Microsoft Entra object, so you supply the Wiz service principal **object ID**. This app registration is unique to your Wiz tenant — find your **Application (client) ID** on the Microsoft Sentinel integration setup screen in Wiz (**Settings > Integrations > Add > Microsoft Sentinel**), then substitute it for `<WIZ_APP_ID>` below. In Azure Cloud Shell (no local install required; creating the service principal needs permission to register enterprise applications in Microsoft Entra ID) run the line below — it prints the object ID, creating the service principal first if it does not yet exist in your tenant:\n\n```bash\nWIZ_APP_ID=\"<WIZ_APP_ID>\" # from the Wiz Microsoft Sentinel integration setup screen\naz ad sp show --id \"$WIZ_APP_ID\" --query id -o tsv 2>/dev/null \\\n || az ad sp create --id \"$WIZ_APP_ID\" --query id -o tsv\n```",
185185
"title": "STEP 1 - Get the Wiz service principal object ID"
186186
},
187187
{
@@ -378,7 +378,7 @@
378378
},
379379
"instructionSteps": [
380380
{
381-
"description": "ARM cannot resolve a Microsoft Entra object, so you supply the Wiz service principal **object ID**. In Azure Cloud Shell (no local install required; creating the service principal needs permission to register enterprise applications in Microsoft Entra ID) run the line below — it prints the object ID, creating the service principal first if it does not yet exist in your tenant:\n\n```bash\naz ad sp show --id ae69b94b-e367-4660-9b35-cfb4b5966728 --query id -o tsv 2>/dev/null \\\n || az ad sp create --id ae69b94b-e367-4660-9b35-cfb4b5966728 --query id -o tsv\n```",
381+
"description": "ARM cannot resolve a Microsoft Entra object, so you supply the Wiz service principal **object ID**. This app registration is unique to your Wiz tenant — find your **Application (client) ID** on the Microsoft Sentinel integration setup screen in Wiz (**Settings > Integrations > Add > Microsoft Sentinel**), then substitute it for `<WIZ_APP_ID>` below. In Azure Cloud Shell (no local install required; creating the service principal needs permission to register enterprise applications in Microsoft Entra ID) run the line below — it prints the object ID, creating the service principal first if it does not yet exist in your tenant:\n\n```bash\nWIZ_APP_ID=\"<WIZ_APP_ID>\" # from the Wiz Microsoft Sentinel integration setup screen\naz ad sp show --id \"$WIZ_APP_ID\" --query id -o tsv 2>/dev/null \\\n || az ad sp create --id \"$WIZ_APP_ID\" --query id -o tsv\n```",
382382
"title": "STEP 1 - Get the Wiz service principal object ID"
383383
},
384384
{

0 commit comments

Comments
 (0)