How to Configure Azure for Microsoft 365 Insight Monitoring

In order for Netreo's Microsoft 365 Insight add-on to work, some changes must be made in Azure to facilitate monitoring.

1. Log in to your Azure portal (https://portal.azure.com).
2. Search for or select Microsoft Entra ID.
   
3. From the directory overview page, record your Tenant ID.
   • You will need to enter this and several other values into Netreo when configuring Microsoft 365 Insight.
     
4. From the Manage menu on the left select App registrations.
5. On the App registrations page select New registration.
   
   1. Enter a name for your new app.
   2. Leave all other settings at their defaults.
   3. Select Register.
      
6. On the app details page, record your app's:
   • Display name
   • Application (client) ID
   • Directory (tenant) ID
7. From the Manage menu on the left select Certificates & secrets.
   
8. In the Client secrets area select New client secret.
9. From the Client secrets table, record the value in the Value column of your new secret.
   
10. From the Manage menu on the left select API permissions.
    
11. In the Configured permissions area select Add a permission.
    1. Select Microsoft Graph.
       
    2. Select Delegated Permissions.
    3. Locate User.Read in the permissions list and select it by placing a checkmark next to its name.
    4. Select Add permission.
       • Please note that only the User.Read permission should be a Delegated permission; the permissions added below should all be Application permissions.
12. In the Configured permissions area, again select Add a permission.
    1. Select Microsoft Graph.
    2. This time select Application Permissions.
    3. Locate the following in the permissions list and select them by placing a checkmark next to their names.
       • ServiceHealth.Read.All
         
       • Group.Read.All
       • Directory.Read.All
       • User.Read.All
       • Application.Read.All
       • Reports.Read.All
    4. Select Add permission.
13. In the Configured permissions area, again select Add a permission.
    1. This time select Office 365 Management APIs.
       
    2. Select Application Permissions.
    3. Locate ServiceHealth.Read in the permissions list and select it by placing a checkmark next to its name.
    4. Select Add permission.
14. Once all permissions are added, select Grant admin consent for (your application) at the top of the permissions list to ensure all permissions are correctly granted.
    

Now take the values you recorded earlier and proceed to How to Configure Microsoft 365 Insight and follow the steps in How to Connect Netreo to Microsoft 365.