> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Office 365 Management Activity

> Microsoft Office 365 Management Activity provides a comprehensive logging and auditing service for various Office 365 workloads, enabling organizations to monitor user activities, detect security threats, and comply with regulatory requirements.

## Creating a Microsoft Office 365 Management Activity connection

## Using App Registration

To create the connection you need:

* An API Address
* A Client ID
* A Client Secret
* A Tenant ID

### Obtaining the credentials

1. Log into the [Azure Portal](https://portal.azure.com/#home).

2. Go to the *Microsoft Entra ID* resource.

   <img src="https://mintcdn.com/blinkops-2/LiDiL34PEmIGHJGK/img/ActiveDirectory/azure_active_directory.png?fit=max&auto=format&n=LiDiL34PEmIGHJGK&q=85&s=57246fca73df6e9ce3f39594b5c944bf" alt="Azure Active Directory Resource" width="2760" height="1602" data-path="img/ActiveDirectory/azure_active_directory.png" />

3. In the left-hand menu, click **App registrations**.

   <img src="https://mintcdn.com/blinkops-2/LiDiL34PEmIGHJGK/img/ActiveDirectory/app_registrations.png?fit=max&auto=format&n=LiDiL34PEmIGHJGK&q=85&s=aa4834712de9b57c079d56adb68abc7f" alt="App Registrations" width="495" height="853" data-path="img/ActiveDirectory/app_registrations.png" />

4. Create a new application registration or click on one of your existing applications.

   <img src="https://mintcdn.com/blinkops-2/LiDiL34PEmIGHJGK/img/ActiveDirectory/my_app1.png?fit=max&auto=format&n=LiDiL34PEmIGHJGK&q=85&s=bc11b1db3698cb119e105eaa7e699f6b" alt="My App" width="2628" height="1138" data-path="img/ActiveDirectory/my_app1.png" />

5. In the left-hand menu, click **API permissions**.

   <img src="https://mintcdn.com/blinkops-2/LiDiL34PEmIGHJGK/img/ActiveDirectory/api_permissions.png?fit=max&auto=format&n=LiDiL34PEmIGHJGK&q=85&s=b0ed7c3e06ffd15e35fb078b7b3f0e78" alt="API Permissions" width="320" height="853" data-path="img/ActiveDirectory/api_permissions.png" />

6. Click **Add a permission** and select **Office 365 Management APIs**.

   <img src="https://mintcdn.com/blinkops-2/SvXOjNzLNjf-qU4G/img/MicrosoftO365ManagementActivity/add_o365_permission.png?fit=max&auto=format&n=SvXOjNzLNjf-qU4G&q=85&s=8d435d010db590f5fd5d170dafcfb474" alt="Add Permission" width="3432" height="1700" data-path="img/MicrosoftO365ManagementActivity/add_o365_permission.png" />

7. Choose **Application permissions** and mark the permissions you wish to add.

   <img src="https://mintcdn.com/blinkops-2/LiDiL34PEmIGHJGK/img/ActiveDirectory/application_permissions.png?fit=max&auto=format&n=LiDiL34PEmIGHJGK&q=85&s=96ae24085dfac2547b72a7abbc82eca4" alt="Application Permissions" width="1919" height="833" data-path="img/ActiveDirectory/application_permissions.png" />

To support all Blink actions, these are the required **application** permissions:

| Least privileged permissions | Higher privileged permissions |
| ---------------------------- | ----------------------------- |
| ActivityFeed.Read            | ActivityFeed.Read             |
| ServiceHealth.Read           | ServiceHealth.Read            |
|                              | ActivityFeed.ReadDlp          |

<Info>
  Read DLP policy events permission (`ActivityFeed.ReadDlp`) will only be
  necessary if you are interested in the DLP workloads.
</Info>

<Check>
  As a best practice, request the **least privileged permissions** that your app
  needs in order to access data and function correctly. Requesting permissions
  with more than the necessary privileges is poor security practice, which may
  cause users to refrain from consenting and affect your app's usage. For
  additional information, refer to [Microsoft Graph
  permissions](https://learn.microsoft.com/en-us/graph/permissions-reference).
</Check>

8. Click **Add permissions** to save the changes.

9. Click **Grant admin consent for `<your tenant>`** on the API permissions page. **Only admins can grant consent**.

   <img src="https://mintcdn.com/blinkops-2/LiDiL34PEmIGHJGK/img/ActiveDirectory/grant_admin_consent.png?fit=max&auto=format&n=LiDiL34PEmIGHJGK&q=85&s=ae92df915ab2cd3ffb8d3241752e6e56" alt="Grant Admin Consent" width="1319" height="833" data-path="img/ActiveDirectory/grant_admin_consent.png" />

10. Confirm that the added permissions are now verified.

<img src="https://mintcdn.com/blinkops-2/LiDiL34PEmIGHJGK/img/ActiveDirectory/granted_azure.png?fit=max&auto=format&n=LiDiL34PEmIGHJGK&q=85&s=2d18748d4cede7a080065283e0f118a4" alt="Granted Admin Consent" width="2050" height="642" data-path="img/ActiveDirectory/granted_azure.png" />

11. Navigate to **Overview** and Copy your **client ID** and **tenant ID**.

<img src="https://mintcdn.com/blinkops-2/LiDiL34PEmIGHJGK/img/ActiveDirectory/client_tenant.png?fit=max&auto=format&n=LiDiL34PEmIGHJGK&q=85&s=7faa71341ef29fce86e62d436472e630" alt="Client ID & Tenant ID" width="3438" height="1266" data-path="img/ActiveDirectory/client_tenant.png" />

12. Create a new **client secret**.

<img src="https://mintcdn.com/blinkops-2/LiDiL34PEmIGHJGK/img/ActiveDirectory/secret.png?fit=max&auto=format&n=LiDiL34PEmIGHJGK&q=85&s=9d1dfac219ab431a28a8c0d5219b96f1" alt="Client Secret" width="3250" height="1252" data-path="img/ActiveDirectory/secret.png" />

13. Copy the **secret value**.

<img src="https://mintcdn.com/blinkops-2/LiDiL34PEmIGHJGK/img/ActiveDirectory/secret_value.png?fit=max&auto=format&n=LiDiL34PEmIGHJGK&q=85&s=8c7709585443b3044f2c17e3e9493ed9" alt="Client Secret" width="2672" height="1312" data-path="img/ActiveDirectory/secret_value.png" />

### Creating your connection

1. In the Blink platform, navigate to the **Connections** page > **Add connection**. A New Connection dialog box opens displaying icons of external service providers available.

2. Select the **Microsoft Office 365 Management Activity** icon. A dialog box with name of the connection and connection methods appear.

3. (Optional) Edit the name of the connection. At a later stage you cannot edit the name.

4. Select **App Registration** as the method to create the connection.

5. Fill in the parameters:

   * The API Address
   * The Client ID
   * The Client Secret
   * The Tenant ID

6. (Optional) Click **Test Connection** to test it.

7. Click **Create connection**. The new connection appears on the **Connections** page.
