Configuration Steps - Entra ID (Azure AD)

1. Configure the Entra ID (Azure AD) Component

1.1 Register an App and Generate the Client ID and Secret Key for Entra ID (Azure AD) Auditing

NOTE: Copy the Client ID and Secret value for adding a Microsoft 365 component for Entra ID

  • Click on the API permission tab for the given Client ID and select Add a Permission

2. Permissions for the Auditing of Entra ID

  • Select Microsoft API’s and API’s my organization uses as follows:

    • Microsoft 365 Graph API’s, Office 365 Management API’s and select permission type(s) as detailed below:

Microsoft Graph API’s

AuditLog.Read.All

Application

Directory.Read.All

Application

Office 365 Management API’s

ActivityFeed.Read

Delegated

ActivityFeed.ReadDlp

Delegated

ActivityFeed.Read

Application

ActivityFeed.ReadDlp

Application

NOTE: Every permission change required must be granted admin consent

Now add the components with Client ID and Secret Key