Microsoft 365 plugin

For more information about what this plugin does and the data streams it retrieves, see:

Microsoft 365

Analyze and report on your Microsoft 365 usage.

To add a data source click on the + next to Data Sources on the left-hand menu in SquaredUp. Search for the data source and click on it to open the Configure data source page.

Before you start

Set up App Registration

  1. Log in to the Azure portal.
  2. In Microsoft Entra ID > App registrations create a new app registration, using the default options (no redirect URI is needed).
  3. Make a note of the Application (client) ID and the Directory (tenant) ID.
  4. In Certificates and secrets add a new secret, and make a note of the value.
    For more information see Create a Microsoft Entra application and service principal that can access resources

Configure App Registration access to your Microsoft Graph APIs

  1. Click API permissions > Add a permission
  2. Click Microsoft Graph from the Microsoft APIs section.
  3. Important: Click Application permissions.

  4. Add the following permissions:
    • AuditLog.Read.All
    • Device.Read.All
    • Directory.Read.All
    • Group.Read.All
    • Reports.Read.All
    • Sites.Read.All
  5. Click Add permissions.
  6. Admin consent is required for these permissions to become active. Click Grant admin consent for <your organization>

    If you don’t have the necessary rights in Microsoft Entra ID to complete this step, ask a suitable person to grant these permissions.

    After adding permissions to your API, you should see the selected permissions under Configured permissions, as shown in the following image.
    You might also notice the User.Read permission for the Microsoft Graph API. This permission is added automatically when you register an app in the Azure portal.

    For more information see Microsoft Quickstart: Configure a client application to access a web API

Configuring the data source

  1. Enter the Directory (tenant) ID, Application (client) ID, and Client secret noted down earlier.
  2. Restrict access to this data source:
    You can enable this option if you only want certain users or groups to have access to the data source, or the permission to link it to new workspaces. See data source access control for more information.

  3. Click Test and add to validate the data source configuration. SquaredUp will now attempt to connect to SquaredUp using the provided authentication method. If this process fails, see Testing and troubleshooting for assistance with the corresponding errors.

Was this article helpful?


Have more questions or facing an issue?