M365Defender-VulnerabilityManagement Deployment Template Validation Failed

[conor-campbell-23]

Describe the bug
When deploying the connector from the Github, validation fails, connector here - https://github.com/Azure/Azure-Sentinel/tree/master/DataConnectors/M365Defender-VulnerabilityManagement)

Error message -
"Deployment template validation failed: 'The template resource 'rbacAssignmentLaw' at line '2241' and column '5' is not valid: The language expression property array index '2' is out of bounds.. Please see https://aka.ms/arm-functions for usage details.'. (Code: InvalidTemplate)"

To Reproduce
Steps to reproduce the behavior:

1. Go to https://github.com/Azure/Azure-Sentinel/tree/master/DataConnectors/M365Defender-VulnerabilityManagement)
2. Scroll down to Non-Network Restricted Deployment
3. Select Deploy to Azure
4. See error

Expected behavior
Deployment of azure resources to send vulnerability information from Defender to Sentinel

Screenshots
Attached

Desktop (please complete the following information):

• OS: Windows
• Browser: Chrome and Edge both

[github-actions]

Thank you for submitting an Issue to the Azure Sentinel GitHub repo! You should expect an initial response to your Issue from the team within 5 business days. Note that this response may be delayed during holiday periods. For urgent, production-affecting issues please raise a support ticket via the Azure Portal.

[v-muuppugund]

Hi @conor-campbell-23 , Thanks for flagging this issue, we will investigate this issue and get back to you with some updates by 28Nov23. Thanks!

[v-sudkharat]

Hi @conor-campbell-23, Sorry for delay in response.
While custom deployment of ARM template, could you please fill details for Log Analytics Workspace Resource Id with below format-

/subscriptions/Your Subscription Id /resourceGroups/YourResourceGroupName/providers/Microsoft.OperationalInsights/workspaces/YourWorkspaceName

Once you filled required details click on review and create. Please let us know if issue is still persist.

Thanks!

[conor-campbell-23]

hey folks, we got this deployed, not sure if maybe it was a permissions issue but it is working ok now.

[v-sudkharat]

Hi @conor-campbell-23, thanks for your confirmation.