Microsoft Azure API poller templates

The following API Poller templates are available for Microsoft Azure:

• Microsoft Azure Active Directory API poller template
• Microsoft Azure App Service API poller template
• Microsoft Azure Batch Account API poller template
• Microsoft Azure Blob Storage Account API poller template
• Microsoft Azure Event Hub Namespace API poller template
• Microsoft Azure IOT Hub API poller template
• Microsoft Azure SQL Database API poller template
• Microsoft Azure SQL Server Database Elastic Pool API poller template
• Microsoft Azure Synapse Analytics API poller template
• Microsoft Azure Virtual Machine API poller template
• Microsoft Azure Virtual Machine Scale Set API poller template

New to REST APIs? Watch Intro to APIs for people who hate to program and API Pollers: When SNMP Won't Cut It.

Configure Azure permissions for API pollers

Work with your Azure admin to configure the following permissions so API pollers can collect data. See also API poller authorization and Find Microsoft Azure credentials.

Prerequisites

• Use the following parameters to specify the API endpoint in the request URL:

  • ${EXPECTED_SYNCTIME}: The date and time for which you are requesting data. For example, 2019-12-02T13:55:02Z
  • ${GROUP_ID}: The Azure AD group for which you are requesting data. For example, 3047e099-727e-4b07-8d62-1145d5ad7b59

• Configure OAuth 2.0 Azure credentials with the following values:

  • Scope: Depending on the template, use https://graph.microsoft.com/.default or https://graph.microsoft.com/.default. For example, the Azure Active Directory API poller template uses https://graph.microsoft.com/.default. The Azure App Service API poller template uses https://management.azure.com/.default.
  • Access Token URL: https://login.microsoftonline.com/{TENANTID}/oauth2/v2.0/token

  Although "(optional)" appears next to the Scope field in the UI, this value is required for API pollers based on this template.
  

• For API pollers that access Microsoft Graph, credentials have the following Application-type permissions:

  • Directory.Read.All
  • Group.Read.All
  • SecurityEvents.Read.All