Merge pull request #24931 from MicrosoftDocs/main

Publish main to live, 03/18, 3:30 PM IST

Author: aditisrivastava07

microsoft-365/lighthouse/m365-lighthouse-faq.yml

@@ -23,7 +23,7 @@ metadata:
   description: "For Managed Service Providers (MSPs) using Microsoft 365 Lighthouse, get answers to frequently asked questions (FAQs) about Microsoft 365 Lighthouse."
 title: Microsoft 365 Lighthouse frequently asked questions (FAQs)
 summary: |
-  Last updated January 17, 2024. This article contains answers to frequently asked questions (FAQs) about Microsoft 365 Lighthouse.
+  Last updated March 15, 2024. This article contains answers to frequently asked questions (FAQs) about Microsoft 365 Lighthouse.
   
   If you can't find an answer to your question, let us know by providing feedback and we'll add it to this article.
   
@@ -78,13 +78,13 @@ sections:
          
       - question: What if I don't want to see certain tenants in Microsoft 365 Lighthouse?
         answer: |
-          If you don't want to see certain tenants and their data in Lighthouse, you can inactivate those tenants. To inactivate a tenant, follow these steps:
+          If you don't want to see certain tenants and their data in Lighthouse, you can remove those tenants. To remove a tenant, follow these steps:
           
           1. In the left navigation pane in <a href="https://go.microsoft.com/fwlink/p/?linkid=2168110" target="_blank">Lighthouse</a>, select **Tenants** to open the **Tenants** page.
-          2. Find the tenant that you want to inactivate, select the three dots (more actions) next to the tenant name, and then select **Inactivate tenant**.
-          3. In the confirmation dialog, select **Confirm** to inactivate the tenant.
+          2. Find the tenant that you want to remove, select the three dots (more actions) next to the tenant name, and then select **Remove tenant**.
+          3. In the confirmation dialog, select **Confirm** to remove the tenant.
               > [!NOTE]
-              > Once you inactivate a tenant, you can't take action on the tenant until inactivation is complete. It may take up to 48 hours for inactivation to complete.
+              > Once you remove a tenant, you can't take action on the tenant until the removal process is complete. It may take up to 48 hours for this process to complete.
           
           To learn more about tenants, see [Microsoft 365 Lighthouse tenants page overview](m365-lighthouse-tenants-page-overview.md).
           

microsoft-365/lighthouse/m365-lighthouse-tenants-page-overview.md

@@ -5,7 +5,7 @@ ms.author: sharik
 author: SKjerland
 manager: scotv
 ms.reviewer: ebamoh
-ms.date: 09/29/2023
+ms.date: 03/15/2023
 audience: Admin
 ms.topic: article
 ms.service: microsoft-365-lighthouse
@@ -32,6 +32,7 @@ The Tenants page also includes the following options:
 - **Export:** Select to export tenant data to an Excel comma-separated values (.csv) file.
 - **Manage Tags:** Select to add, edit, or delete a tag.
 - **Assign Tags:** Select to assign a tag to a tenant.
+- **Assign baseline:** Select to assign a baseline to a tenant.
 - **Search:** Enter keywords to quickly locate a specific tenant in the list.
 
 :::image type="content" source="../media/m365-lighthouse-tenants-page-overview/tenant-page-overview.png" alt-text="Screenshot of the Tenants page." lightbox="../media/m365-lighthouse-tenants-page-overview/tenant-page-overview.png":::
@@ -40,18 +41,19 @@ The Tenants page also includes the following options:
 
 The tenant list provides insights into the different customer tenants that you have a contract with, including their Lighthouse management status. The tenant list also lets you tag tenants to provide different filters throughout Lighthouse, manage services for tenants in the applicable admin center, and drill down to learn more about a given tenant and the status of its deployment plan.
 
-After your customer tenants meet the [Lighthouse onboarding requirements](m365-lighthouse-requirements.md), their status will show as **Active** in the tenant list.
+After your customer tenants meet the [Lighthouse onboarding requirements](m365-lighthouse-requirements.md), their Lighthouse management status will show as **Managed** in the tenant list.
 
 The tenant list lets you:
 
 - Access applicable admin centers to manage services for your customer tenants.
-- Automatically sort tenants by active, inactive, and ineligible.
+- Automatically sort tenants by Managed, Limited, Removed by partner, or Removed by customer.
 - Export the tenant list.
 - Assign and manage tags.
+- Assign a baseline.
 - Search for tenants by name.
-- Filter tenants by status, delegated admin privilege (DAP), and tags.
+- Filter tenants by Lighthouse management status, Delegated access, or Tags.
 
-To inactivate a tenant, manage tenant services, or view and manage tags, select the three dots (more actions) next to the tenant name. You can view individual tenants by either selecting the tenant name or by selecting one of the tags assigned to the tenant.
+To remove a tenant, manage tenant services, or view and manage tags, select the three dots (more actions) next to the tenant name. You can view individual tenants by either selecting the tenant name or by selecting one of the tags assigned to the tenant.
 
 > [!TIP]
 > You can also use the Tenants filter at the top of any page in Lighthouse to select a tenant and then access applicable admin centers to manage services for that tenant.
@@ -64,13 +66,14 @@ The following table shows the different statuses and their meaning. For informat
 
 | Status           | Description                                                                                                        |
 |------------------|--------------------------------------------------------------------------------------------------------------------|
-| Active           | This customer tenant can be actively managed and monitored in Lighthouse for users and devices with required licenses.      |
-| Inactive         | Your organization has excluded this customer tenant from Lighthouse management.                                    |
-| Limited          | This customer tenant has access to only a limited set of experiences in Lighthouse, including GDAP setup and management, user search, user details, tenant tagging, and service health. <br> Select the tenant name to see a detailed status of Lighthouse management requirements. For more information, see [Requirements for Microsoft 365 Lighthouse](m365-lighthouse-requirements.md).|
-| In process       | An error occurred during the onboarding process for this customer tenant and we're working on a fix. If this error persists for more than 24 hours, please contact Support. |
+| Managed          | This customer tenant can be actively managed and monitored in Lighthouse for users and devices with required licenses.  |
+| Limited          | This customer tenant has access to only a limited set of experiences in Lighthouse, including GDAP setup and management, user search, user details, tenant tagging, and service health. <br>Select the tenant name to see a detailed status of Lighthouse management requirements. For more information, see [Requirements for Microsoft 365 Lighthouse](m365-lighthouse-requirements.md).|
+| Removed by partner | Your organization has excluded this customer tenant from Lighthouse management. To reactivate the tenant for management by Lighthouse, go to the **Tenants** page, select the three dots (more actions) next to the tenant, and then select **Manage tenant**. |
+| Removed by customer | The customer chose to disallow the use of Microsoft 365 Lighthouse to manage their tenant. To allow the use of Microsoft 365 Lighthouse to manage their tenant, an admin in the customer tenant needs to go to **Org settings** in the Microsoft 365 admin center, select **Microsoft 365 Lighthouse** on the **Services** tab, and then select the option to allow the use of Microsoft 365 Lighthouse customer management experiences in their tenant. |
+| Error       | An error occurred during the onboarding process for this customer tenant and we're working on a fix. If this error persists for more than 24 hours, please contact Support. |
 
 > [!NOTE]
-> Once you inactivate a customer tenant, you can't take action on the tenant until the inactivation process completes. It may take up to 48 hours for inactivation to complete. If you decide to reactivate a customer tenant, it may take up to 48 hours for data to reappear.
+> Once you remove a customer tenant, you can't take action on the tenant until the removal process completes. It may take up to 48 hours for this process to complete. If you decide to manage the customer tenant again, it may take up to 48 hours for data to reappear.
 
 ## Tenant tags
 
@@ -96,13 +99,20 @@ The Tenant overview section provides information about the customer tenant from
 | Tenant information    | Description|
 |-----------------------|------------------|
 | Tenant Domain    |The organization's domain.|
-| Tenant ID|The organizations's tenant ID.|
-| Lighthouse management | The management status of the customer tenant in Lighthouse (Active, Limited, or Inactive) |
+| Tenant ID|The organization's tenant ID.|
+| Lighthouse management | The management status of the customer tenant in Lighthouse (Managed, Limited, Removed by partner, or Removed by customer) |
+| Delegated access  | The type of admin privileges the customer has granted your organization: DAP, GDAP, or None. |
 | Your permissions    | The roles assigned to you in the tenant. Roles determine which tasks you can complete for customers, and what data you can view.|
 | Total users    |The number of users assigned in the tenant. You may select this number to open the Users page for that tenant.|
 | Total devices|The number of devices enrolled in the tenant. You may select this number to open the Devices page for that tenant.|
 
-#### Customer overview
+#### Scores section
+
+The Scores section shows you the customer tenant's Secure Score, Exposure Score, and adoption insights at a glance. Select any of the links in this section to view detailed information about the scores and insights.
+
+To learn more, see [Microsoft Secure Score](../security/defender/microsoft-secure-score.md), [Exposure score in Defender Vulnerability Management](../security/defender-vulnerability-management/tvm-exposure-score.md), and [Microsoft Adoption Score](../admin/adoption/adoption-score.md).
+
+#### Customer overview section
 
 The Customer overview section provides the following information for key contacts within the tenants you manage:
 
@@ -111,7 +121,7 @@ The Customer overview section provides the following information for key contact
 - Customer domain
 - Company website
 
-#### Customer contacts
+#### Customer contacts section
 
 The Customer contacts section provides the following information for key contacts within the tenants you manage:
 
@@ -125,9 +135,9 @@ The **Notes** column shows information for the tenant, such as engagement prefer
 
 To edit details, add notes, or delete an existing contact, select the contact name from the list. In the **Edit contact** pane, edit or delete the contact. To add another contact, select **+Add contact**.
 
-#### Deployment and User progress section
+#### Deployment progress and User progress sections
 
-These sections provide a graphical view of the progress for deployment and user progress.
+These sections provide a graphical view of the deployment and user progress.
 
 #### Microsoft 365 services usage section
 
@@ -157,9 +167,11 @@ The Deployment progress by user tab also includes the following options:
 - **Refresh:** Select to retrieve the most current deployment step data.
 - **Search:** Enter keywords to quickly locate a specific deployment step in the list.
 
-### Secure score tab
+### Scores tab
+
+This tab provides Microsoft Secure Score information and adoption insights. Microsoft Secure Score is a measurement of an organization's security posture. The higher the score, the better protected the organization is from threats. Microsoft provides recommendations for how to increase an organization's secure score, which will improve its security posture. To learn more, see [Microsoft Secure Score](../security/defender/microsoft-secure-score.md).
 
-This tab provides Microsoft Security Score information, a measurement of an organization's security posture. The higher the score, the better protected the organization is from threats. Microsoft provides recommendations for how to increase an organization's secure score, which will improve its security posture. To learn more, see [Microsoft Secure Score](../security/defender/microsoft-secure-score.md).
+Adoption insights are a subset of the Microsoft Adoption Score. Adoption insights tell you how the organization uses Microsoft products and features so you can help them improve their productivity and use the products more efficiently. To learn more, see [Microsoft Adoption Score](../admin/adoption/adoption-score.md).
 
 ## Related content
 

microsoft-365/lighthouse/m365-lighthouse-troubleshoot.md

@@ -48,7 +48,7 @@ This article describes error messages and problems that you might encounter whil
 
 ## Customer tenant onboarding  
 
-### Customer tenants show a status other than "Active" in the tenant list  
+### Customer tenants show a status other than "Managed" in the tenant list  
 
 **Cause:** Your customer tenants don't meet the following criteria:
 
@@ -63,11 +63,12 @@ Either granular delegated admin privileges (GDAP) plus an indirect reseller rela
 
 | Status | Description | Resolution |
 |--|--|--|
-| Inactive | Your organization has excluded this customer tenant from Lighthouse management. | You need to reactivate the tenant. On the **Tenants** page, select the three dots (more actions) next to the tenant that you want to reactivate, and then select **Activate tenant**. It can take 24–48 hours for initial customer data to appear in Lighthouse. |
 | Limited | This customer tenant has access to only a limited set of experiences in Lighthouse, including GDAP setup and management, user search, user details, tenant tagging, and service health. | Select the tenant name to see a detailed status of Lighthouse management requirements. For more information, see [Requirements for Microsoft 365 Lighthouse](m365-lighthouse-requirements.md). |
-| In process | An error occurred during the onboarding process for this customer tenant and we're working on a fix. | If this error persists for more than 48 hours, please contact Support. |
+| Removed by partner | Your organization has excluded this customer tenant from Lighthouse management. | You need to reactivate the tenant for management by Lighthouse. On the **Tenants** page, select the three dots (more actions) next to the tenant that you want to manage, and then select **Manage tenant**. It can take 24–48 hours for initial customer data to appear in Lighthouse. |
+| Removed by customer | The customer chose to disallow the use of Microsoft 365 Lighthouse to manage their tenant. | An admin in the customer tenant needs to go to **Org settings** in the Microsoft 365 admin center, select **Microsoft 365 Lighthouse** on the **Services** tab, and then select the option to allow the use of Microsoft 365 Lighthouse customer management experiences in their tenant. |
+| Error | An error occurred during the onboarding process for this customer tenant and we're working on a fix. | If this error persists for more than 48 hours, please contact Support. |
 
-If you confirmed that your customer tenant meets the onboarding criteria and they're still not showing as **Active** in Lighthouse, contact Support. For more information, see [Get help and support for Microsoft 365 Lighthouse](m365-lighthouse-get-help-and-support.md).
+If you confirmed that your customer tenant meets the onboarding criteria and they're still not showing as **Managed** in Lighthouse, contact Support. For more information, see [Get help and support for Microsoft 365 Lighthouse](m365-lighthouse-get-help-and-support.md).
 
 ## Access and permissions
 

microsoft-365/media/m365-lighthouse-tenants-page-overview/tenant-details-page.png

@@ -954,6 +954,22 @@
 
   - name: Reference
     items:
+    - name: Microsoft Security Resources
+      items: 
+        - name: Threat actor naming
+          href: ../defender/microsoft-threat-actor-naming.md
+        - name: Malware names
+          href: ../defender/malware-naming.md
+        - name: How Microsoft identifies malware and PUA
+          href: ../defender/criteria.md
+        - name: Submit files for analysis
+          href: ../defender/submission-guide.md
+        - name: Troubleshoot MSI portal errors caused by admin block
+          href: ../defender/portal-submission-troubleshooting.md
+        - name: Microsoft virus initiative
+          href: ../defender/virus-initiative-criteria.md
+        - name: Software developer FAQ
+          href: ../defender/developer-faq.yml
     - name: Malware information
       items: 
        - name: Coinminers

microsoft-365/media/m365-lighthouse-tenants-page-overview/tenant-page-overview.png

@@ -68,6 +68,8 @@ For information on other tables in the advanced hunting schema, [see the advance
 | `UserAgentTags` | `dynamic` | More information provided by Microsoft Defender for Cloud Apps in a tag in the user agent field. Can have any of the following values: Native client, Outdated browser, Outdated operating system, Robot |
 | `RawEventData` | `dynamic` | Raw event information from the source application or service in JSON format |
 | `AdditionalFields` | `dynamic` | Additional information about the entity or event |
+| `LastSeenForUser` | `string` | Shows how many days back the attribute was recently in use by the user in days (i.e. ISP, ActionType etc.)  |
+| `UncommonForUser` | `string` | Lists the attributes in the event that are uncommon for the user, using this data to help rule out false positives and find out anomalies |
 
 ## Apps and services covered
 

microsoft-365/security/defender-endpoint/TOC.yml

@@ -78,7 +78,7 @@ In break-glass scenarios or matters that require immediate attention (for exampl
 
 ## Ask Defender Experts
 
-While the previous scenarios involve our experts initiating communication with you, you can also request advanced threat expertise on demand by selecting **Ask Defender Experts** directly inside the Microsoft Defender XDR portal. [Learn more](start-using-mdex-xdr.md#request-advanced-threat-expertise-on-demand)
+While the previous scenarios involve our experts initiating communication with you, you can also request advanced threat expertise on demand by selecting **Ask Defender Experts** directly inside the Microsoft Defender XDR portal. [Learn more](onboarding-defender-experts-for-hunting.md#collaborate-with-experts-on-demand)
 
 ## Collaborating with your service delivery manager
 

microsoft-365/security/defender/advanced-hunting-cloudappevents-table.md

@@ -58,10 +58,10 @@
     href: memory.md
   - name: CPU Regression Analysis
     href: cpu.md
-  - name: Viewing Test Results
-    href: view-test-results.md
   - name: Export your data
     href: export-your-data.md
+  - name: Viewing Test Results
+    href: view-test-results.md
     items:
       - name: Viewing Script Execution Results
         href: view-script-execution-results.md