SkillRepo
Sign InSign Up
Catalog
MicrosoftDocs/azure-lighthouse

MicrosoftDocs

azure-lighthouse

Expert knowledge for Azure Lighthouse development including decision making, security, configuration, integrations & coding patterns, and deployment. Use when configuring Lighthouse delegations, AOBO/PIM access, Arc/Sentinel integrations, policies/remediation, or Marketplace offers, and other Azure Lighthouse related development tasks. Not for Azure Arc (use azure-arc), Azure Managed Applications (use azure-managed-applications), Azure Resource Manager (use azure-resource-manager), Azure Role-based access control (use azure-rbac).

v1.0Latest
New~1.5kUpdated Jun 26, 2026

Azure Lighthouse Skill

This skill provides expert guidance for Azure Lighthouse. Covers decision making, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category Lines Description
Decision Making L33-L39 Guidance on when and how to use Azure Lighthouse: multi-tenant enterprise setups, ISV SaaS patterns, comparing Lighthouse vs managed apps, and designing Managed Service offers.
Security L40-L47 Managing secure access in Azure Lighthouse: roles, tenants, AOBO, PIM eligible authorizations, and recommended security controls/practices for cross-tenant management.
Configuration L48-L60 Configuring and managing Azure Lighthouse delegations: onboarding via ARM/policy, updating/removing access, deploying/using policies (incl. built-ins), remediation with managed identities, and monitoring changes.
Integrations & Coding Patterns L61-L68 Cross-tenant integration patterns for managing Arc servers, Sentinel workspaces, Migrate projects, and Monitor Logs at scale using Azure Lighthouse.
Deployment L69-L72 Guidance for packaging, publishing, and managing Azure Lighthouse managed service offers in Azure Marketplace, including requirements, steps, and configuration details.

Decision Making

Topic URL
Apply Azure Lighthouse in ISV SaaS scenarios https://learn.microsoft.com/en-us/azure/lighthouse/concepts/isv-scenarios
Choose between Azure Lighthouse and managed applications https://learn.microsoft.com/en-us/azure/lighthouse/concepts/managed-applications
Design Managed Service offers for Azure Lighthouse https://learn.microsoft.com/en-us/azure/lighthouse/concepts/managed-services-offers

Security

Topic URL
Apply CSP AOBO and Lighthouse security controls https://learn.microsoft.com/en-us/azure/lighthouse/concepts/cloud-solution-provider
Implement recommended security practices for Azure Lighthouse https://learn.microsoft.com/en-us/azure/lighthouse/concepts/recommended-security-practices
Use tenants, users, and roles with Azure Lighthouse https://learn.microsoft.com/en-us/azure/lighthouse/concepts/tenants-users-roles
Configure eligible authorizations with Azure Lighthouse and PIM https://learn.microsoft.com/en-us/azure/lighthouse/how-to/create-eligible-authorizations

Configuration

Topic URL
Configure policy remediation with managed identities via Lighthouse https://learn.microsoft.com/en-us/azure/lighthouse/how-to/deploy-policy-remediation
Monitor Azure Lighthouse delegation changes via activity logs https://learn.microsoft.com/en-us/azure/lighthouse/how-to/monitor-delegation-changes
Onboard customers to Azure Lighthouse with ARM https://learn.microsoft.com/en-us/azure/lighthouse/how-to/onboard-customer
Delegate all subscriptions in a management group with policy https://learn.microsoft.com/en-us/azure/lighthouse/how-to/onboard-management-group
Deploy Azure Policy across tenants with Lighthouse https://learn.microsoft.com/en-us/azure/lighthouse/how-to/policy-at-scale
Remove Azure Lighthouse delegations and access https://learn.microsoft.com/en-us/azure/lighthouse/how-to/remove-delegation
Update Azure Lighthouse delegations and role assignments https://learn.microsoft.com/en-us/azure/lighthouse/how-to/update-delegation
Use Azure Lighthouse ARM templates and samples https://learn.microsoft.com/en-us/azure/lighthouse/samples/
Use built-in Azure Policy definitions for Lighthouse https://learn.microsoft.com/en-us/azure/lighthouse/samples/policy-reference

Integrations & Coding Patterns

Topic URL
Integrate Azure Lighthouse with Azure Arc at scale https://learn.microsoft.com/en-us/azure/lighthouse/how-to/manage-hybrid-infrastructure-arc
Manage Microsoft Sentinel workspaces at scale with Lighthouse https://learn.microsoft.com/en-us/azure/lighthouse/how-to/manage-sentinel-workspaces
Manage Azure Migrate projects across tenants with Lighthouse https://learn.microsoft.com/en-us/azure/lighthouse/how-to/migration-at-scale
Use Azure Monitor Logs across tenants via Lighthouse https://learn.microsoft.com/en-us/azure/lighthouse/how-to/monitor-at-scale

Deployment

Topic URL
Publish Azure Lighthouse Managed Service offers https://learn.microsoft.com/en-us/azure/lighthouse/how-to/publish-managed-services-offers
Files1
1 files · 18.2 KB

Select a file to preview

Overall Score

78/100

Grade

B

Good

Safety

82

Quality

76

Clarity

82

Completeness

68

Summary

Azure Lighthouse reference skill that provides indexed guidance on decision-making, security, configuration, integrations, and deployment. The skill is a curated navigation layer directing agents to Microsoft Learn documentation via mcp_microsoftdocs tools, with fallback to fetch_webpage for content retrieval.

Detected Capabilities

documentation navigationremote documentation fetching via mcp_microsoftdocsfallback webpage fetchmetadata version checking

Trigger Keywords

Phrases that MCP clients use to match this skill to user intent.

configure lighthouse delegationazure lighthouse setupmanaged service provider accesscross-tenant azure managementlighthouse policy deploymentpim aobo authorizationlighthouse marketplace offer

Risk Signals

INFO

Network access required to fetch Microsoft Learn documentation

Compatibility section + How to Use
INFO

External URL references to learn.microsoft.com (16 links)

Decision Making, Security, Configuration, Integrations & Deployment sections
INFO

Dependency on optional MCP tool (mcp_microsoftdocs) with fallback to fetch_webpage

How to Use section

Referenced Domains

External domains referenced in skill content, detected by static analysis.

github.comlearn.microsoft.com

Use Cases

  • Configure delegated access for managed service providers
  • Design multi-tenant ISV SaaS deployments with Lighthouse
  • Implement Azure Lighthouse with PIM and AOBO security controls
  • Deploy policies and remediation at scale across delegated subscriptions
  • Integrate Azure Arc, Sentinel, or Monitor across customer tenants
  • Publish managed service offers to Azure Marketplace
  • Onboard customer subscriptions to delegated management

Quality Notes

  • Well-organized category index with clear topic groupings and line ranges for agent navigation
  • Explicitly distinguishes Lighthouse from related Azure services (Arc, Managed Apps, ARM, RBAC) to reduce scope confusion
  • Includes metadata freshness check (>3 months suggests pull latest version) showing awareness of documentation staleness
  • Fallback fetch_webpage strategy handles MCP tool unavailability gracefully
  • All 16 documentation links are current and authoritative (learn.microsoft.com)
  • Clear instructions for agents on how to use Category Index and reference files
  • Structured as navigation/index skill rather than instructional content — appropriate for Azure Lighthouse's broad scope
  • License file included (CC-BY 4.0) shows proper attribution practices
  • Missing: no local reference files referenced in Category Index (mentioned '[security.md](security.md)' pattern in instructions but no files present)
  • Missing: no edge case handling documented (e.g., what if category lines are incorrect, what if AOBO/PIM is unavailable)
  • Missing: no concrete examples of ARM templates, policy definitions, or code patterns (relies entirely on external docs)
Model: claude-haiku-4-5-20251001Analyzed: Jun 26, 2026

Reviews

Add this skill to your library to leave a review.

No reviews yet

Be the first to share your experience.

Use MicrosoftDocs/azure-lighthouse in your dev environment

Start a Developer trial

Command Palette

Search for a command to run...