Documentation forAccess Rights Manager

Prepare the Microsoft/Office 365 integration

You can integrate Microsoft 365 or Office 365 with ARM, which uses the Microsoft Graph API to access Azure AD and OneDrive.

See Describe the differences between Office 365 and Microsoft 365 located on the Microsoft Learn website for details about both products.

The following permissions are required:

  • Application.ReadWrite.OwnedBy
  • Directory.ReadWrite.All
  • Files.ReadWrite.All
  • Group.ReadWrite.All
  • Member.Read.Hidden
  • User.ReadWrite.All
  • Sites.FullControl.All
  • User.Invite.All

ARM uses the Office 365 Management API to access OneDrive and SharePoint Online events.

To retrieve events, enable Office 365 auditing. See Turn auditing on or off located on the Microsoft Learn website for instructions.

The following permissions are required:

  • ActivityFeed.Read
  • ServiceHealth.Read
Additional apps may need to be registered to access SharePoint Online and Exchange Online. See Required accounts and permissions for a SharePoint scan and Prepare Exchange resources for instructions.

Assign the required permissions

  1. Navigate to the Azure Portal website and log in with administrator credentials.

  2. Click Azure Active Directory.

    (Screenshot property of © 2020 Microsoft Corporation)

  3. Click Azure Active Directory.

    (Screenshot property of © 2020 Microsoft Corporation)

  4. Click New Registration.

    (Screenshot property of © 2020 Microsoft Corporation)

  5. Assign a name to the application, and then click Register.

    For example, SolarWinds ARM.

    (Screenshot property of © 2020 Microsoft Corporation)

  6. Click Overview.

    (Screenshot property of © 2020 Microsoft Corporation)

  7. In the Application (client) ID field, record the application to a safe place. You will need this ID number in a future step as the user name to access Azure/Microsoft 365 resources.

  8. Click Certificates and Secrets.

  9. Click New client secret.

    (Screenshot property of © 2020 Microsoft Corporation)

  10. In the Description field, enter a description of the client secret.

    (Screenshot property of © 2020 Microsoft Corporation)

  11. In the Expires field, enter an expiration date for the secret.

  12. Click Add.

  13. In the Value field, copy the value to a safe place. You will need this value as the password to access Azure/Microsoft 365 resources.

    (Screenshot property of © 2020 Microsoft Corporation)

  14. Click API permissions.

    (Screenshot property of © 2020 Microsoft Corporation)

  15. Click Add a permission.

    (Screenshot property of © 2020 Microsoft Corporation)

  16. Click Microsoft Graph.

    (Screenshot property of © 2020 Microsoft Corporation)

  17. Click Application permissions.

    (Screenshot property of © 2020 Microsoft Corporation)

  18. Under Request API permissions, enable the following permissions:

    • Application.ReadWrite.OwnedBy

    • Directory.ReadWrite.All

    • Files.ReadWrite.All

    • Group.ReadWrite.All

    • Member.Read.Hidden

    • User.ReadWrite.All

    • Sites.FullControl.All

    • User.Invite.All

    (Screenshot property of © 2020 Microsoft Corporation)

  19. Click Add permissions.

  20. Click Add a permission.

    (Screenshot property of © 2020 Microsoft Corporation)

  21. Click Office 365 Management APIs.

  22. Under Request API permissions, click Application permissions.

    (Screenshot property of © 2020 Microsoft Corporation)

  23. Enable the following permissions:

    • ServiceHealth.Read

    • ActivityFeed.Read

  24. Save your settings.

  25. Under Grant admin consent confirmation, click Grant admin consent for, and then click Yes.

    (Screenshot property of © 2020 Microsoft Corporation)

    If the approval was approved, you can use the Application ID and client secret to configure Azure resources in ARM.

    (Screenshot property of © 2020 Microsoft Corporation)