Skip to main content
Microsoft Graph does not support any actions itself. It serves only as a general connection that can be used across all Microsoft Graph integrations for extra convenience.

​
Creating a Microsoft Graph connection

To reduce the number of scopes, we recommend using separate connections for each of the following integrations rather than the general Microsoft Graph connection.
  1. Microsoft Entra ID
  2. Microsoft Defender XDR
  3. Microsoft Teams
  4. SharePoint
  5. OneDrive
  6. Microsoft Outlook
  7. Microsoft Intune
  8. Microsoft Excel
  9. Microsoft E-Discovery
  10. Microsoft OneNote
You can continue to use the general connection if desired.
Create the connection by using one of the following methods:

​
Using OAuth

​
Creating your connection

  1. In the Blink platform, navigate to the Connections page > Add connection. A New Connection dialog box opens displaying icons of external service providers available.
  2. Select the Microsoft Graph icon. A dialog box with name of the connection and connection methods appear.
  3. (Optional) Edit the name of the connection. At a later stage you cannot edit the name.
  4. Click Microsoft Graph to authenticate using OAuth.
  5. Sign in using your credentials.
Need admin approval? please refer to the Need Admin Approval guide.

​
Using App Registration

To create the connection you need:
  • A client ID
  • A client secret
  • A tenant ID

​
Obtaining the credentials

  1. Log into the Azure Portal.
  2. Go to the Microsoft Entra ID resource. Azure Active Directory Resource
  3. In the left-hand menu, click App registrations. App Registrations
  4. Create a new application registration or click on one of your existing applications. My App
  5. In the left-hand menu, click API permissions. API Permissions
  6. Click Add a permission and select Microsoft Graph. Add Permission
  7. Choose Application permissions and mark the permissions you wish to add. Application Permissions To allow all actions in Blink to run, add the following permissions used by Blink to access your Microsoft Graph APIs: 
    AuditLog.Read.All
Calendars.ReadBasic
Calendars.ReadWrite
Calendars.ReadWrite.Shared
Channel.Create
ChannelMember.ReadWrite.All
ChannelMessage.ReadWrite
ChannelMessage.Send
ChannelSettings.ReadWrite.All
Chat.Create
Chat.ReadWrite
Chat.ReadWrite.All
ChatMember.ReadWrite
Device.Command
Device.Read.All
DeviceManagementApps.ReadWrite.All
DeviceManagementManagedDevices.PrivilegedOperations.All
DeviceManagementManagedDevices.ReadWrite.All
Directory.AccessAsUser.All
Directory.ReadWrite.All
eDiscovery.ReadWrite.All
Files.ReadWrite
Files.ReadWrite.All
Group.ReadWrite.All
GroupMember.ReadWrite.All
IdentityRiskyUser.Read.All
IdentityRiskyUser.ReadWrite.All
Mail.Read
Mail.ReadBasic
Mail.ReadWrite
Mail.ReadWrite.Shared
Mail.Send
MailboxSettings.ReadWrite
Notes.ReadWrite.All
OnlineMeetings.ReadWrite
SecurityAlert.Read.All
SecurityAlert.ReadWrite.All
SecurityIncident.ReadWrite.All
Sites.Manage.All
Sites.ReadWrite.All
TeamMember.ReadWrite.All
ThreatHunting.Read.All
User.EnableDisableAccount.All
User.ManageIdentities.All
User.Read
User.ReadWrite.All
User.RevokeSessions.All
    You can adjust the permissions according to your requirements.Ensure that the permissions configured in your app registration align with those required by the actions you wish to perform with Blink. Remember, having a high-level permission does not automatically grant access to its subordinate permissions.
  8. Click Add permissions to save the changes.
  9. Click Grant admin consent for <your tenant> on the API permissions page. Only admins can grant consent. Grant Admin Consent
  10. Navigate to Overview and Copy your client ID and tenant ID. Client ID & Tenant ID
  11. Create a new client secret. Client Secret
  12. Copy the secret value. Client Secret

​
Creating your connection

  1. In the Blink platform, navigate to the Connections page > Add connection. A New Connection dialog box opens displaying icons of external service providers available.
  2. Select the Microsoft Graph icon. A dialog box with name of the connection and connection methods appear.
  3. (Optional) Edit the name of the connection. At a later stage you cannot edit the name.
  4. Select App Registration as the method to create the connection.
  5. Fill in the parameters:
    • The Client ID
    • The Client Secret
    • The Tenant ID
  6. (Optional) Click Test Connection to test it.
  7. Click Create connection. The new connection appears on the Connections page.