Microsoft M365 Integration

To attach a Microsoft Office M365 account to Detect, you will need:

• The Prelude CLI
• An Azure user with Global Administrator role

In Azure

Create an app

Follow the official Microsoft documentation to create a new app. While you walk through the guide:

• Please take note of your app's TENANT ID (step 7), APP ID (step 7), and APP SECRET (step 6)
• You do not need to create a multi-tenant app (step 8)

Granting API Permissions

• Under API Permission the app needs the following permission granted:
  • Under "API's my organization uses" search for: "Office 365 Exchange Online" and grant the following "Exchange" Application permission:
    • Exchange.ManageAsApp

Granting Security Reader role

• Note your App name or ID from the above steps

• Under Microsoft Entra select "Roles and Administrators" on the left hand side

• Find the security "Security Reader" role and click on it

• Add Assignment, here search for your App name or ID that you created in the above steps and assign it to the Security Reader role:

  

  
  

In Prelude

Attach the partner via UI

• Navigate to your user name in upper right hand corner and select "Integrations"
• "Connect to Microsoft M365"
• Fill out Base URL, Tenant ID, APP ID and App Secret to connect

Detach the partner via UI

• Navigate to your user name in upper right hand corner and select "Integrations"
• "Disconnect Microsoft M365"