This offer provides a streamlined, "lite" version of Azure Lighthouse onboarding, designed for organizations that require secure visibility, monitoring, and support escalation without granting broad administrative privileges. By leveraging Azure Lighthouse and delegating only the Reader and Support Request Contributor roles, customers can engage trusted managed service providers (MSPs) or partners for oversight and support while retaining full control over their Azure environments.

Value Proposition

Secure Delegation: Customers can extend limited access to partners for monitoring and support without exposing sensitive administrative controls.
Operational Efficiency: Service providers can monitor resources and raise support requests directly on behalf of the customer, streamlining issue resolution.
Least Privilege Approach: Ensures compliance and security by granting only the minimum required roles.
Faster Time-to-Support: Direct support request contribution reduces delays in diagnosing and escalating issues to Microsoft.

Business Audience

This solution is designed for:

Managed Service Providers (MSPs): Who want to deliver monitoring and support assistance without full management rights.
IT Outsourcing Firms: Supporting customers with visibility and incident escalation but not day-to-day administration.
Enterprises with Partner Support Agreements: Who need trusted partners to assist in oversight and support without relinquishing control.
SMBs: Seeking lightweight managed services with minimal complexity and risk.

Target Industry

The offer is industry-agnostic, suitable for:

Regulated industries (finance, healthcare, government) where least privilege access is critical.
Enterprises requiring auditable, controlled support engagements.
Any organization prioritizing security, governance, and compliance while engaging external partners.

Scope of Managed Service

With this Azure Lighthouse Lite offer, the partner will:

Monitor Azure Resources: Gain read-only access to customer subscriptions and resource groups for visibility into infrastructure health, cost usage, and compliance posture.
Provide Support Assistance: Create and manage Azure support requests on behalf of the customer to ensure timely resolution of incidents and issues.
Collaborate Securely: Operate under customer oversight, with all access logged and auditable through Azure Lighthouse and Azure Monitor.

What will not be done under this Lite offer:

No configuration changes, deployments, or administrative tasks. No Contributor, Owner, or elevated access roles assigned. No direct control over customer resources or policies.

How it is Managed

Access is delegated securely through Azure Lighthouse, using a Marketplace deployment that onboards Reader and Support Request Contributor roles.

All partner activities are fully visible and auditable within the customer’s Azure environment.

Customers maintain full ownership and control of their subscriptions, while partners provide value through monitoring insights and escalation capabilities.

Kocho Managed Services LiteKocho Managed Services

Kocho Managed Services Lite

Kocho Managed Services

Kocho Managed Services Lite

Kocho Managed Services

Kocho Managed Services Lite
Kocho Managed Services