Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Info

Content

Table of Contents

...

M365 Audit - Overview

The Microsoft 365 Security Inspection Report provides a comprehensive overview of the security posture within the Microsoft 365 environment. It evaluates various security controls, identifies vulnerabilities, and offers recommendations to enhance security measures, ensuring robust protection against potential threats and breaches.

...

Getting Started - Application Thumbprint Certificate

Before you begin the setups below, you must download the Certificate for Application Thumbprint.

  1. Login to the ConnectSecure portal.

  2. Navigate to Global > Settings > Integrations > Microsoft 365 Security Inspector.

  3. Scroll down and tap the Download Certificate; this will be uploaded directly in the Azure Portal next.

...

User Permissions

Global Reader permission is given to the User and for the Application which we have registered with are registeringwith O365 as in the screenshot below:

...

M365 Audit - Setup in Azure Portal

  1. Log in to the Azure portal (portal.azure.com).

  2. Tap on the ‘App registrations’ option in Azure services (or use the Search).

...

  1. Record the Application (client) ID and Directory (Tenant ID) values from the screen.

...

Generate Client Secret

  1. Click on the ‘Add a certificate or secret’ link from the Client credentials section.

...

  1. After the upload, you will see the Thumbprint value; record this for use in ConnectSecure.

...

Configure API Permissions

  1. Under the Manage section, tap on the Manifest option.

...

  1. Tap on API Permissions from the left panel, then tap the ‘Grant admin consent for…’ button.

...

Assign Roles in Microsoft Entra Roles and Administrators

Panel
bgColor#DEEBFF

Assign Roles in Microsoft Entra Roles and Administrators for O365

  • These Roles works for O365 Sync Scan

  • Global Reader Privileges

The following roles will be added:

  • Exchange Administrator

  • Teams Administrator

  • Global Administrator

  • SharePoint Administrator

  1. At the top, use the Search, enter ‘Microsoft Microsoft Entra Roles and Administrators’, and tap to select.

...

  1. Search for and tap on the ‘Exchange Administrator’ Global Readeroption.

...

  1. Select the ‘Add Assignments’ button.

...

Info

Enter any optional policy descriptions and justifications as required; this may vary depending on your Azure portal settings.

  1. Repeat the same steps for the ‘Teams Administrator’ option.

    1. Add assignments

    2. Search for and add your application name

...

.

...

  1. Add assignments

  2. Search for and add your application name

...

  1. Repeat the same steps for the ‘SharePoint Administrator’ option.

    1. Add assignments

    2. Search for and add your application name

...

...

M365 Audit - Setup in ConnectSecure

  1. Login to your ConnectSecure portal (IE: portal.myconnectsecure.com)

  2. Please navigate back to Global > Settings > Integrations > Microsoft 365 Security Inspector, where we originally obtained the download certificate (application thumbprint).

Credentials

Complete the required fields with your values from the previous steps outlined above.

...

🏁 Proceed to Company Mapping below.

...

Company Mapping

You will need to map the ConnectSecure company to the M365 company.

...

  1. Tap on the Add, then Finish to complete mapping.

...

Start M365 Sync

Once you complete the mapping(s), navigate to Active Directory > M365 Audit Report.

...

Tap on the Word or PPT icons for report/PPT outputs.

...

Results Summary

...

Need Support?

Contact our support team by sending an email to support@connectsecure.com or by visiting our Partner Portal, where you can create, view, and manage your tickets.

https://cybercns.freshdesk.com/en/support/login

...