Unable to enable intelligence pack in Log Analytics workspace error while linking to defender for IoT

Question

Hello everyone,

Context

To understand how defender for IoT for device builders work, I am linking log analytics workspace to the defender for IoT as per this document

I followed the MS instructions to setup resource provider and access control for log analytics workspace.

Then I went to enable Defender for iot --> settings --> data collection to link the log analytics workspace.

Challenge

I am facing the following error

FailedDependency

Unable to enable intelligence pack in Log Analytics workspace '/subscriptions/.../providers/microsoft.operationalinsights/workspaces/law-defender-for-iot', please make sure to grant the required permissions to access the Defender for IoT experience.

Would need the community's help to understand If I missed giving any access permissions for this attachment to succeed or what to do to solve this or any leads would help?

Thanks

Answer 1

Hey, the classic "FailedDependency" error Azure’s way of saying, "I’m not mad, just disappointed lol" Sounds like you’ve done the groundwork with the resource provider and access control, but Defender for IoT is being a bit fussy. Double-check if you’ve given the Defender for IoT service the right permissions on the Log Analytics workspace. It needs at least Contributor or Log Analytics Contributor to enable the intelligence pack. Also, make sure the workspace isn’t locked down with any sneaky resource locks or network restrictions. If all else fails, try the old IT mantra: "Have you tried turning it off and on again?" (Or, in Azure terms, re-linking the workspace.) Let me know if you crack it or if Azure wins this round. Cheers! Alex