Versions Compared

Old Version 5

changes.mady.by.user Aparna Rr

Saved on

compared with

New Version 6

changes.mady.by.user Aparna Rr

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

8.Click Application permissions

...

  1. If using hostname in integration parameters: graph.microsoft.com/v1.0/security/alerts : Expand SecurityActions and SecurityEvents, select Read.All permissions under both and click on Add permissions.

  2. If using hostname in integration parameters: graph.microsoft.com/beta/security/alerts_v2, please Please grant SecurityAlert.Read.All permission.

...

  1. On the next screen, click Grant Admin consent for Default Directory

...

  1. Click on Certificates & secrets

...

  1. Click on New Client secret, Create a new key as shown below

...

  1. Copy the Secret Value displayed, this will be required for integration.

...

Secret Value will be displayed only once, so make sure to copy it first before leaving this page.

...

Property

Default Value

Description

OAUTH CLIENT ID

N/A

Specify the client ID of the Entra ID application to use for the integration.

OAUTH CLIENT SECRET

N/A

Specify the client secret value (not the secret ID!) of the Entra ID app
to use for the integration.

TENANT ID

N/A

Specify the Entra ID (tenant ID).
To find it, go to the Entra ID page > App Registration >
Application you configured for your integration >
Directory (tenant) ID.

API FULL PATH

graph.microsoft.com/v1.0beta/security/alerts_v2

API full pathFor alerts_v2 please use: graph.microsoft.com/beta/security/alerts_v2

API AUTHENTICATION ENDPOINT

login.microsoftonline.com

 The Microsoft Active Directory authentication endpoint.
Example: https://login.microsoftonline.com/{tenantId}/oauth2/token
Mention the TenantID in the above URL and provide it.

ASSET NAMESPACE

N/A

 To assign an asset namespace to all events that are ingested from a particular feed, set the "namespace" field within details. The namespace field is a string.