![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(83.2, 28.000000000000004%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EV1%3C/text%3E%3C/svg%3E)
@VENKADESHPRABU-1191 I hope you are doing well,
Even if your Log Analytics workspace is connected in Defender, Microsoft Sentinel features won’t appear until you explicitly enable Sentinel on that workspace.
In the Defender portal:
- Go to Microsoft Sentinel → + Create (or Add).
Select your existing Log Analytics workspace.
Complete the enablement wizard.
If Sentinel isn’t enabled, the Content Hub and connectors blades will stay hidden.
Role requirements
To see and configure content in the Content Hub, you need at least:
- Microsoft Sentinel Contributor role at the resource group level that contains the workspace.
Plus Log Analytics Contributor or higher for query‑level work.
If you’re on a free account, make sure your user is assigned these roles in Access control (IAM) for the workspace’s resource group.Even if your Log Analytics workspace is connected in Defender, Microsoft Sentinel features won’t appear until you explicitly enable Sentinel on that workspace.
😊 If my answer helped you resolve your issue, please consider marking it as the correct answer. This helps others in the community find solutions more easily. Thanks!