Table of Contents | ||||
---|---|---|---|---|
|
...
Note |
---|
You need the Admin level permissions on the Azure portal as the subscription setup will require admin consent API permissions, authentications, and audits. |
Action | Steps | |||
1 | Register and configure the application |
| ||
2 | Grant the required permissions |
| ||
3 | Obtain the requires credentials for the collector |
|
...
Collector service | Resource | Required permissions | Microsoft documentation |
---|---|---|---|
| alerts | SecurityEvents.Read.All | |
| alerts_v2 | SecurityAlert.Read.All, SecurityIncidents.Read.All, and SecurityActions.Read.All | |
| secureScores | SecurityEvents.Read.All | |
| secureScoreControlProfiles | SecurityEvents.Read.All | |
| directoryAudits | AuditLog.Read.All and Directory.Read.All | |
| provisioningObjectSummary | AuditLog.Read.All and Directory.Read.All | |
| signIns | AuditLog.Read.All and Directory.Read.All | |
Required for all services | authentication | User.Read |
...