Configure Graph API in Microsoft Azure

Login to Microsoft Azure portal.

In the main menu, select Azure Active Directory and then select App registrations.

To create a new application, select New registration.

Enter the following information:

1. Enter Name of the application.

2. Set Supported account types to Accounts in this organizational directory only.

3. Set Redirect URI to Web and in the URI box enter http://localhost.

To save the new application, select Register.

In the Microsoft Azure portal and the main menu, select Azure Active Directory, then select App registrations.

Select All apps.

Find and select the application you created in Create Azure Active Directory application.

Select API Permissions.

In the API Permissions view, select Add a permission.

In the Request API permissions section, select Microsoft Graph.

Configure Delegated permissions:

1. Select Delegated permissions.

2. Select offline_access in the list of permissions.

3. Clear the User > User.Read permission, if it is selected.

Configure Application permissions:

1. Select Application permissions.

2. Do one of the following:

   • Select Directory > Directory.Read.All in the list of permissions.

   • Select Organization > Organization.Read.All in the list of permissions and select User > User.Read.All in the list of permissions.

3. If you want to collect last activity data for Microsoft 365 users, select Report.Read.All > Reports in the list of permissions. This step is only required if Include last activity checkbox is selected.

Select Add permissions.

Select Grant admin consent for [your company name].

An example of the API permissions view after admin consent is granted.

In the Microsoft Azure portal, navigate to the application you created.

Copy the value of the Directory (tenant) ID.

Use it as the Directory Id when configuring the integration connector.

In the Microsoft Azure portal, navigate to the application you created.

Copy the value of the Application (client) ID.

Use it as the Application id when configuring the integration connector.

In the Microsoft Azure portal, navigate to the application you created.

Select Certificates & secrets.

Create a new client secret using the following information:

1. Select New client secret.

2. In the side panel that appears, set Description to sim_secret_key.

3. Set Expires to 24 months.

   Note

   The new client secret needs to be regenerated after the set expiration time. This also means that the connector needs to be re-configured.

Select Add.

The client secret you create appears on the page.

Use the client secret value as the Application secret when configuring the integration connector.