This connector queries the Microsoft Graph API on the 'users', 'devices', and 'directoryRoles' endpoints to generate indicators on users, their logins, their equipments, and the administrators of the Microsoft tenant.
This connector retrieves several types of information:
Account indicators: number of active users, active guests, dormant accounts, and the number of global administrators.
Device indicators: number of active devices.
Information to configure:
OS version: Number of devices by OS.
User Groups: Number of users in each group.
Adding and configuring the connector
To add this connector, go to Catalog > Connectors > Microsoft Entra ID > Add a connector.
After adding, you need to configure:
Operator perimeter: the perimeter that operates and dictates the rules.
Frequency: Frequency of automatic querying of the Microsoft API and frequency of associated indicators. This frequency can be daily, weekly, monthly, semi-annual, or annual.
Once the connector is created, you must then register the Tenacy application in Microsoft by following the procedure for your instance and granting the following permissions to the secret:
Directory.Read.All
AuditLog.Read.All
You will then need to enter the following information, from the Microsoft application registration, into the connector configuration window:
Application ID
Application Secret
Client ID
Inactive account delay: Expressed in days, it allows you to configure the delay for detecting an account that hasn't logged in for a certain number of days or more.
⚠️ To obtain the number of dormant accounts, you must have at least a Microsoft Entra ID Premium P1 subscription.
Running your first test
Once the connector is properly configured, test the integration by running the first execution.
Go to ⚙️ > Connectors > Click on the connector > Run now:
💡 Feel free to contact Tenacy support if you have any questions about this.