...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
Content
...
| Table of Contents |
|---|
...
M365 Audit - Overview
The Microsoft 365 Security Inspection Report provides a comprehensive overview of the security posture within the Microsoft 365 environment. It evaluates various security controls, identifies vulnerabilities, and offers recommendations to enhance security measures, ensuring robust protection against potential threats and breaches.
...
Getting Started - Application Thumbprint Certificate
Before you begin the setups below, you must download the Certificate for Application Thumbprint.
Login to the ConnectSecure portal.
Navigate to Global > Settings > Integrations > Microsoft 365 Security Inspector.
Scroll down and tap the Download Certificate; this will be uploaded directly in the Azure Portal next.
...
M365 Audit - Setup in Azure Portal
Log in to the Azure portal (portal.azure.com).
Tap on the ‘App registrations’ option in Azure services (or use the Search).
...
Record the Application (client) ID and Directory (Tenant ID) values from the screen.
...
Generate Client Secret
Click on the ‘Add a certificate or secret’ link from the Client credentials section.
...
After the upload, you will see the Thumbprint value; record this for use in ConnectSecure.
...
Configure API Permissions
Under the Manage section, tap on the Manifest option.
...
Tap on API Permissions from the left panel, then tap the ‘Grant admin consent for…’ button.
...
Assign Roles in Microsoft Entra Roles and Administrators
| Panel | ||
|---|---|---|
| ||
The following roles will be added: Exchange Administrator Teams Administrator Global Administrator Assign Roles in Microsoft Entra Roles and Administrators for O365
|
At the top, use the Search, enter ‘Microsoft Entra Roles and Administrators’Administrators’, and tap to select.
...
Search for and tap on the ‘Exchange Administrator’ ‘Global Reader’ option.
...
Select the ‘Add Assignments’ button.
...
Search for your added application name here and tap Add. (IE: ConnectSecure_M365_Audit)
...
Select a member and added application.
...
Shows selected member and application details as follows:
...
| Info |
|---|
Enter any optional policy descriptions and justifications as required; this may vary depending on your Azure portal settings. |
Repeat the same steps for the ‘Teams Administrator’ option.
Add assignments
Search for and add your application name
...
Repeat the same steps for the ‘Global Administrator’ option.
Add assignments
Search for and add your application name
...
. |
Add assignments
Search for and add your application name
...
M365 Audit - Setup in ConnectSecure
Login to your ConnectSecure portal (IE: portal.myconnectsecure.com)
Please navigate back to Global > Settings > Integrations > Microsoft 365 Security Inspector, where we originally obtained the download certificate (application thumbprint).
Credentials
Complete the required fields with your values from the previous steps outlined above.
...
🏁 Proceed to Company Mapping below.
...
Company Mapping
You will need to map the ConnectSecure company to the M365 company.
...
Tap on the Add, then Finish to complete mapping.
...
Start M365 Sync
Once you complete the mapping(s), navigate to Active Directory > M365 Audit Report.
Click on the Sync option to start the assessment.
...
Job gets created for the Sync with the Job Status.
...
The results will be displayed in the M365 Audit Report once the assessment is finished.
Tap on the Word or PPT icons for report/PPT outputs.
...
Results Summary
...
Need Support?
Contact our support team by sending an email to support@connectsecure.com or by visiting our Partner Portal, where you can create, view, and manage your tickets.
https://cybercns.freshdesk.com/en/support/login
...