Updated date: Microsoft Sentinel in the Azure portal to be retired March 2027
Analysis / inference: Microsoft Sentinel will be retired from the Azure portal after March 31 2027, moving exclusively to the Microsoft Defender portal.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Sentinel - What's new · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
Support for Microsoft Sentinel in the Azure portal will end on March 31 2027; Sentinel will remain available only through the Microsoft Defender portal.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisAfter March 31 2027 Sentinel will no longer be supported in the Azure portal, so organizations must move to the Microsoft Defender portal to retain Sentinel functionality and support.
After the retirement date, Sentinel cannot be accessed or managed via the Azure portal, requiring migration of dashboards, workbooks, alerts, and automation to the Defender portal to maintain security operations.
Section 03 · Recommended actions
- Identify all Sentinel resources currently accessed through the Azure portal
- Plan and schedule migration to the Microsoft Defender portal well before March 2027
- Validate that all workbooks, alerts, and automation function in the Defender portal
- Update documentation and train staff on the Defender‑portal interface
- Ensure required licenses and permissions are in place for Defender portal access
- Current Sentinel deployment location (Azure portal vs Defender portal)
- Existing workbooks, alerts, and automation that reference Azure‑portal‑specific URLs or settings
- User access and permissions in the Microsoft Defender portal
- Integration points that may rely on Azure‑portal APIs