Unable to install ZeroFox Marketplace Application from marketplace

[DNRRomero]

Describe the bug
On September 18th, 2024, a new Azure Solution was added to this repository named ZeroFox. It is composed of several data connectors, out of which 1 is a codeless connector while the rest are made through Azure Functions.
It was notified to customers that our app was added to Azure and that they were able to install it and use it by looking into our latest published offer . However, any customer who tries to access the application, having set up a Resource Group and Workspace, is unable to allocate resources for installing the app. Whenever a Resource Group is selected and the user tries to select an associated workspace, it shows that none exists even though these were already created.
I need help with this issue since customers are waiting to use our application and, due to configuration issues, the application can not be delivered to customers.

To Reproduce
Steps to reproduce the behavior:

1. Go to https://portal.azure.com/#home
2. Search for "ZeroFox Connector" in the Marketplace section
3. Click on the Create button to set up a plan.
4. Select a Resource Group and try to select a workspace matching your selected Resource Group
5. See error

Expected behavior
The plan associated with the ZeroFox Connector marketplace offer is created properly and the application can then be used.

Screenshots

[v-sudkharat]

Hi @DNRRomero, Thanks for flagging this issue, we will investigate this issue and get back to you with some updates 18-04-2024. Thanks!

[v-sudkharat]

Hey @DNRRomero, We have followed-up with your shared repro steps from this issue description. After selecting the solution from Azure Marketspace, we have selected our Subscription / Resource group, and while selecting the Workspace we are able to see the associated Workspace over there.
Sharing the screenshot for your reference :-

Could you please check the workspace availability in your resource group once from your end and let us know if still you are having issue.
Note: It may take 5 to 10 sec delays if your connection is unstable.

Thanks!

[DNRRomero]

Hi @v-sudkharat! I just tried again and checked on my workspace availability

As you can see, I have two workspaces set up in the resource group zf_Test, namely workspace_test and workspace_test_3
However when trying to add them to the Solution plan:

Even if I try to create a resource group inline, it won't give the option of creating a corresponding workspace

I have verified that I am not the only user with this issue, as 2 coworkers and a number of customers have run into it.

[v-sudkharat]

Hey @DNRRomero,
It may due to not having required roles and permission's, so could you please confirm once if you are compliant/having permission to resource group/workspace:-
https://learn.microsoft.com/en-us/azure/sentinel/roles

If still having issue, can we have a call? could you please share your mail ID and couple of Timeslot's for call with us on below mail Id - v-sudkharat@microsoft.com. So we can check it into it.

Thanks!

[DNRRomero]

Hey @v-sudkharat I have looked into the roles required and did not see anything that may be the cause.
I call with you to get help on this would be great, I've just sent you an email with my appointment schedule

[v-sudkharat]

@DNRRomero, We have received your mail. We will schedule a meeting and send invite over mail. Thanks!

[v-sudkharat]

Hey @DNRRomero, Just got the issue from your provided screenshot and before schedule the call, I just want to validate the resource you have created.
By observing the workspace icon, based on your provided screenshot it looks you have created Workspaces service and not Sentinel Log Analytic Workspace in associated Resource Group. To install the sentinel solution from Marketplace, the solution required Log Analytic Workspace linked to its associated Resource Group.
Correct me if you already created Sentinel LAW and still facing the issue.
Sharing the steps to create LAW which required to install solution from marketplace: -

1. Got to Azure Portal HomePage and search for the Microsoft Sentinel : -

2. Click on Create New Workspace and Fill the required details into it : -

3. Select the Resource group where you want to create Microsoft Sentinel into it :-

5. Validate your details once and click on create : -

6. The deployment take few min to create Workspace into Resurce Group.

7. After deployment, Go to Microsoft Sentinel and click on Create :-

8. Enter your created Workspace name into search bar and click on add by selecting it :-

9. Once it gets successfully added, you will get below success message: -

10. Now, while you will get the Workspace while creating the solution from Marketplace :-

Please confirm the above steps and let me know your feedback. So, we can plan the call accordingly.

Thanks!

[DNRRomero]

Hi @v-sudkharat! you were right, I was not setting up the proper workspace resource. However, after setting it up according to your instructions, I kept running into the same issue:
Here is a list with all resources that I have created

Here is the Microsoft Sentinel section with the corresponding workspaces, where you can see that zf-sentinel-worksapce is listed


However, when I try to set up my App, it keeps showing no available workspaces

[v-sudkharat]

Hi @DNRRomero, we have sent a meeting invite. Thanks!

[DNRRomero]

Hi @v-sudkharat ! When can we expect to see changes in our marketplace solution?
Thank you!

[v-sudkharat]

Hey @DNRRomero, I have sent a mail for required few details from your end to update this solution. Could you please check it.
Thanks!