Documentation forHybrid Cloud Observability Essentialsand Server & Application Monitor

Microsoft Azure API poller templates

The following API Poller templates are available for Microsoft Azure:

New to REST APIs? Watch Intro to APIs for people who hate to program and API Pollers: When SNMP Won't Cut It.

Configure Azure permissions for API pollers

Work with your Azure admin to configure the following permissions so API pollers can collect data. See also API poller authorization and Find Microsoft Azure credentials.

Prerequisites

  • Use the following parameters to specify the API endpoint in the request URL:
    • ${EXPECTED_SYNCTIME}: The date and time for which you are requesting data. For example, 2019-12-02T13:55:02Z
    • ${GROUP_ID}: The Azure AD group for which you are requesting data. For example, 3047e099-727e-4b07-8d62-1145d5ad7b59
  • Configure OAuth 2.0 Azure credentials with the following values:
    • Scope: Depending on the template, use https://graph.microsoft.com/.default or https://graph.microsoft.com/.default. For example, the Azure Active Directory API poller template uses https://graph.microsoft.com/.default. The Azure App Service API poller template uses https://management.azure.com/.default.
    • Access Token URL: https://login.microsoftonline.com/{TENANTID}/oauth2/v2.0/token

      Although "(optional)" appears next to the Scope field in the UI, this value is required for API pollers based on this template.

  • For API pollers that access Microsoft Graph, credentials have the following Application-type permissions:
    • Directory.Read.All
    • Group.Read.All
    • SecurityEvents.Read.All