Monitor Service Principals in your tenant

Step 1

Navigate toAzure Active Directory > App Registrations, and click your CloudMonitor Service Principal by name or ClientId under the “All applications” tab.

Step 2

On the side menu, under Manage, click “API permissions” and then click “Add a permission”.

Step 3

In the modal window that opens, click “Microsoft Graph”.

Step 4

Click “Application permissions” and search for [[Application.Read.All]] in the select permissions input field. Then add the read permission by clicking “Add permissions” below.

![Click “Application permissions” and search for [Application.Read.All]] in the select permissions input field

Step 5

Repeat the last step for the same Service Principal, adding these read permissions:
• [[AuditLog.Read.All]]
• [[Directory.Read.All]]

![Repeat the last step for the same Service Principal, adding these read permissions:\ • [[AuditLog.Read.All]]\ • [Directory.Read.All]]

Step 6

Click “Grant admin consent for …”. This action requires a user with Admin rights.

Tip

Now you have configured the required permissions to monitor your Service Principals within the Azure tenant.