Introduction

The Microsoft 365 integration connector can be used for retrieving information from Microsoft 365 Cloud Services. The connector uses Microsoft Graph API to retrieve data from Microsoft 365, and uses an API connection to insert data into Snow License Manager, where it is presented.

The Microsoft 365 connector is available in Snow Integration Manager from version 5.3. This guide covers the configuration of Microsoft 365 connector in Snow Integration Manager 5.29 and later. For older versions, refer to Microsoft 365 Legacy Connector.

Prerequisites

  • On the computer where the Microsoft 365 integration connector will be configured, the following must be installed:

  • A Snow License Manager user account is required for Web API authentication. The user account must be assigned the built-in API Users role.

  • The following prerequisites exist for the Graph API app:

    • Creation of the app

      • If Azure AD > User Settings > Users can register applications is Yes, the user account that has been used to create the app does not have to be assigned to a role.

      • If Azure AD > User Settings > Users can register applications is No, the user account that has been used to create the app must be assigned to one of the following roles:

        • Global administrator

        • Application administrator

        • Cloud application administrator

        • Application developer

    • Granting of administrator consent to the app

      • The user who grants administrator consent must be assigned to the Global administrator role.

    • The following prerequisite exists if the user activity is being fetched by the M365 connector (if the Include last activity checkbox is selected):

      • In Microsoft Admin Center > Settings > Org Settings > Services > Reports, the In all reports, display de-identified names for users, groups, and sites checkbox needs to be unselected.

Connector feature requirements

  • To collect activity data for Skype and Exchange Online for Microsoft 365 users, Snow Integration Manager version 5.7 or later is required.

  • To collect country and department information on Microsoft 365 users, Snow Integration Manager version 5.18 or later is required.

  • For the integration connector to be able to support MFA on the Microsoft 365 user account specified in the connector configuration, Snow Integration Manager version 5.19 or later is required. MFA is supported only for manual aggregation, not for scheduled.

  • To use domain filtering functionality, Snow Integration Manager version 5.21 or later is required.

  • To collect activity data for OneDrive, SharePoint, Yammer and Teams for Microsoft 365 users, Snow Integration Manager version 5.22 or later is required.

  • Starting from Snow Integration Manager version 5.29 or later, connection via PowerShell is not utilized and a Microsoft 365 user account is not required for the configuration of the connector.

    This means that the basic authentication is not used anymore.

  • There are no restrictions in scheduling the connector anymore since the connector is using only application authentication.

Dependencies on other Snow products

  • To use the Microsoft 365 connector in Snow Integration Manager 5.29 or later, Snow License Manager version 9.8.0 or later is required.

  • For the integration connector to be able to insert Microsoft 365 data into Snow License Manager, the Snow License Manager Web API version 8.0.10 or later must be installed. It is included in the Snow License Manager installation, and updates are managed via Snow Update Services.

  • To be able to utilize the Microsoft 365 data and have it presented in the user interface of Snow License Manager, Snow License Manager version 8.1 or later must be installed.

  • To view country and department information on Microsoft 365 users, Snow License Manager version 9.6.0 or later is required.

  • To view activity data for OneDrive, SharePoint, Yammer and Teams for Microsoft 365 users, Snow License Manager version 9.7.0 or later is required.