azure-lighthouse

Name: azure-lighthouse
Availability: InStock
Author: appliedailearner

Guide Azure Lighthouse design and deployment across tenants with RBAC, AOBO, and PIM access.

Updated Dec 19, 2025

Search Tags:#azure #rbac #lighthouse #arc #multitenant #pim

Ready to run

npx skills add https://github.com/appliedailearner/upendra_kumar_portfolio --skill azure-lighthouse-appliedailearner

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: azure-lighthouse
Source: https://github.com/appliedailearner/upendra_kumar_portfolio/tree/main/.agent/skills/azure-lighthouse
Command: npx skills add https://github.com/appliedailearner/upendra_kumar_portfolio --skill azure-lighthouse-appliedailearner

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Azure Lighthouse guidance facilitates cross-tenant governance, enabling secure, scalable multi-tenant delegations and streamlined management patterns across subscriptions.

Core Features & Use Cases

Decision making: guidance on when and how to apply Lighthouse for enterprise or ISV scenarios.
Security & governance: tenant/user/role mapping, AOBO controls, PIM integration, and security hardening practices.
Configuration & deployment: onboarding via ARM and policy, updating/removing access, policy deployment, remediation with managed identities, and change monitoring.
Integrations & Coding Patterns: cross-tenant patterns for Arc integration, Sentinel workspaces, migration at scale, and monitoring across tenants.
Deployment considerations: packaging, publishing, and management of Lighthouse-related offerings and deployments.

Quick Start

Outline a design and deployment plan for Azure Lighthouse multi-tenant delegations including RBAC/AOBO, PIM, policy onboarding, and ongoing governance.

Frequently Asked Questions about azure-lighthouse

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How does Azure Lighthouse work for multi-tenant delegation?▼

Azure Lighthouse enables secure cross-tenant management by allowing delegated access through role-based access control. It projects customer subscriptions into the managing tenant, streamlining governance without switching directories.

How do I onboard subscriptions to Azure Lighthouse using policy?▼

You can onboard subscriptions to Azure Lighthouse using policy-based deployment by assigning ARM templates that enforce delegation at scale. This method ensures ongoing governance and automatically remediates non-compliant resources using managed identities.

Can I integrate Azure Lighthouse with Privileged Identity Management?▼

Yes, Azure Lighthouse integrates with Privileged Identity Management (PIM) to provide just-in-time access for delegated resources. This allows managing tenants to activate elevated roles temporarily, enhancing security hardening across multi-tenant environments.

Does Azure Arc work with cross-tenant Lighthouse management?▼

Azure Arc integrates with Lighthouse to manage hybrid and multi-cloud resources across tenants. Managing tenants can monitor and govern Arc-enabled servers from a centralized workspace using delegated security and governance patterns.

What is the difference between AOBO and RBAC in Azure Lighthouse?▼

RBAC in Lighthouse provides granular, role-based delegated access to specific user groups, while Admin on Behalf Of (AOBO) grants broad account-level access to the managing partner. RBAC is recommended for secure, least-privilege multi-tenant governance.

How do I package and publish a managed service offer for Lighthouse?▼

You package and publish Lighthouse managed service offers through Azure Marketplace. This deployment consideration allows ISVs to define authorization mappings and onboard multiple customers to cross-tenant delegations programmatically.