1. Configure the Entra ID (Azure AD) Component
1.1 Register an App and Generate the Client ID and Secret Key for Entra ID (Azure AD) Auditing
For information on this please use the following link and follow the steps described:
Create or Update Client IDs and Secrets
NOTE: Copy the Client ID and Secret value for adding a Microsoft 365 component for Entra ID
Click on the API permission tab for the given Client ID and select Add a Permission
2. Permissions for the Auditing of Entra ID
Select Microsoft API’s and API’s my organization uses as follows:
Microsoft 365 Graph API’s, Office 365 Management API’s and select permission type(s) as detailed below:
Microsoft Graph API’s
AuditLog.Read.All | Application |
Directory.Read.All | Application |
Office 365 Management API’s
ActivityFeed.Read | Delegated |
ActivityFeed.ReadDlp | Delegated |
ActivityFeed.Read | Application |
ActivityFeed.ReadDlp | Application |
NOTE: Every permission change required must be granted admin consent
Now add the components with Client ID and Secret Key