The M365 integration enables discovery of the following M365 services, providing visibility into service availability and performance for root cause analysis and remediation:

M365 AppsM365 Azure Information ProtectionM365 Bookings
M365 Dynamics 365 AppsM365 Exchange OnlineM365 Forms
M365 Identity ServiceM365 Mobile Device ManagementM365 Office for the web
M365 OneDrive for BusinessM365 PlannerM365 Power Apps
M365 Power Apps in Microsoft 365M365 Power AutomateM365 Power Automate in Microsoft 365
M365 Power BIM365 SharePoint OnlineM365 StaffHub
M365 StreamM365 SuiteM365 Sway
M365 TeamsM365 Yammer EnterpriseMicrosoft Defender for Cloud Apps
Microsoft KaizalaMicrosoft VivaProject for the web
Project OnlineSkype for BusinessMicrosoft Intune

After completing the integration installation and set up, Microsoft 365 resources are discovered and monitoring is enabled as specified in the configuration profile.

Step 1: Register the application with Azure AD

These steps register and authorize a new application to call the reports API.

  1. Log in to the Azure portal using an administrator account.

  2. From the Azure Services menu, Navigate to the App registrations page:

    Image
  3. Select + New Registration.

  4. Enter a display Name and select from the Support account types for who is authorized to access the API:

    Image
  5. Click Register.

  6. On the registration page, save the values in the Application (client) ID and Directory (tenant) ID fields. These are needed later to complete the OpsRamp part of the integration in Step 3: Configure the integration:

    Image

Step 2: Configure API permissions

Add a Microsoft Graph permission in the left navigation panel, click API permissions to add new permissions for the Microsoft Graph APIs:

Add a Microsoft Graph permission

  1. Click + Add a permission to get a list of commonly used APIs:

    Image
  2. You want to add a permission to the Microsoft Graph API. Select Microsoft Graph:

    Image
  3. Click Application permissions to specify the type of permission needed:

    Image
  4. Select the following permissions:

    PermissionDescription
    User.Read.AllPermits you to sign in to the application with your organization account and enables the application to read your profile and basic company information.
    Reports.Read.AllPermits the application to read all service usage reports without having a signed-in user. Services that provide usage reports include Office 365 and Azure Active Directory.
    ServiceHealth.Read.AllPermits the application to read your tenant's service health information, without a signed-in user. Health information may include service issues or service health overviews.
  5. Go to the API Permissions page and grant permission for all configured permissions by selecting Grant admin consent for xyz:

    Image

Add a client secret

  1. In the left navigation panel, click Certificates & secrets:

    Image
  2. Select + New client secret.

    Image
  3. Add a Description and select a time duration for when the secret Expires:

    Image
  4. Click Add.

  5. Save the Value and Secret ID. These are needed later to complete the OpsRamp part of the integration in Step 3: Configure the integration:

    Image

Step 3: Configure the integration

  1. From All Clients, select a client.

  2. Go to Setup > Integrations > Integrations.

  3. In the Saas Application section, select Office365:

    Image
  4. Enter your account information:

    Image
    PropertyDescription
    Name(required) User-defined, descriptive integration name.
    Subscription Id(required) Azure subscription ID, from **Azure services > Subscriptions**.
    Client ID(required) OpsRamp client ID saved from Step 1.
    Tenant ID(required) OpsRamp tenant ID saved from Step 1.
    Security Key>(required) Client secret ID saved from the Add an Office 365 Management API permission step.
    Confirm Security Key(required) Reenter the Security Key.
  5. Click Next.

  6. Choose the discovery schedule period:

    Image
  7. Click Finish.

Next steps

After configuring the integration, M365 services discovery and monitoring is enabled. Discovered services and metrics can be viewed from the Infrastructure page.

No templates need to be applied on discovered devices. Alerts can be enabled using alert policies.

Supported metrics

ResourceMetric NameMetric Display NameUnits
Exchangeoffice365_exchange_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Exchange Online Status
office365_exchange_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Exchange Online Incident Count.Count
office365_exchange_ServiceOutageInHours

The number of hours service has been out of order.
Dynamic 365 Apps Service Outage in Hours.Hours
office365_exchange_MailboxSizeTotal

Total storage consumption by all mailboxes
Mailbox Total SizeGigabytes
office365_exchange_ActiveOrTotalMailboxCount

Number of mailboxes with active count. Active means the user sent/received or read a mail on that day. Categories: total count, active count
Active/total mailbox countCount
office365_exchange_MailboxQuotaLimitCount

Number of mailboxes that have crossed a specific limit. Categories: Under Limit, Warning Issued, Send Prohibited, Send/Receive Prohibited
Number of mailboxes under quota limit countCount
office365_exchange_MessagesTotalSentReadReceived

Number of messages sent, received, read, or any of these three by the organization in total. Categories: sent, received, read, total
Total messages sent/read/receivedCount
office365_exchange_AppUsage

Number of users of different apps or protocols.
  • Categories: Mail for Mac, Outlook for Mac, Outlook For Windows,Outlook For Mobile,Other For Mobile,Outlook For Web.
  • Total: 9
Individual specific app usage in Exchange OnlineCount
SharePointoffice365_sharepoint_UniqueUserCount
Number of unique users who in any way interacted with SharePoint.
Categories: Viewed Or Edited, Synced, Shared Internally, Shared Externally.
Number of unique users who interacted with Sharepoint in specific ways.Count
office365_sharepoint_ActiveUserCount

Total number of interactions with SharePoint without respect to the uniqueness of the user.
  • Categories: Viewed Or Edited, Synced, and more.
  • Total: 5
Number of active users who interacted with Sharepoint in specific waysCount
office365_sharepoint_PageVisitCount

Number of unique pages visited by users.
Number of unique pages visited by users.Count
office365_sharepoint_ActiveFileCount

Number of files that have been interacted with on that day.
Categories: total, active.
Number of files in SharePoint that have been interacted with.Count
office365_sharepoint_TotalFileCount

Total number of files in SharePoint
Categories: total, active.
Total number of files in SharePointCount
office365_sharepoint_Storage

Total storage consumed using SharePoint.
Total storage consumed using SharePointGigabytes
office365_sharepoint_TotalPageVisitCount

Number of pages viewed across all sites.
Provided info: page visit count.
Number of pages viewed across all sitesCount
office365_sharepoint_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Sharepoint Service Status
office365_sharepoint_IncidentCount

service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count,pending count, total count.
Sharepoint Online Incident CountCount
office365_sharepoint_ServiceOutageInHours

The number of hours service has been out of order.
Sharepoint Online Service Outage in HoursHours
Yammeroffice365_yammer_InteractionWithMessagesCount

Number of interactions with Yammer messages.
Categories: liked, posted, read.
Number of interaction with Yammer messagesCount
office365_yammer_UniqueUserCountInteractingWithMessages

Number of unique users who interacted with Yammer messages.
Categories: liked, posted, read.
Number of unique users who interacted with Yammer messagesCount
office365_yammer_UserCountByDeviceType

Number of users by device type interacting using Yammer.
  • Categories: web, iPhone, iPad, and more.
  • Total: 6
Number of users by device type interacting using YammerCount
office365_yammer_DailyUserCountByDeviceType

Number of daily users by device type interacting using Yammer.
  • Categories: web, iPhone, iPad, and more.
  • Total: 6
Number of daily users by device type interacting using YammerCount
office365_yammer_GroupCount

Number of groups in Yammer.
Categories: total, active.
Number of groups in YammerCount
office365_yammer_InteractionInGroupsCount

Number of interaction with messages in Yammer groups.
Categories: liked, posted, read.
Number of interaction with messages in Yammer groupsCount
office365_yammer_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Yammer Enterprise Status
office365_yammer_IncidentCount

service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Yammer Enterprise Incident CountCount
office365_yammer_ServiceOutageInHours

The number of hours service has been out of order.
Yammer Enterprise Service Outage in HoursHours
Microsoft Teamsoffice365_microsoftteams_DailyUniqueUsersByDeviceType

Number of Microsoft Teams daily unique users by device type.
  • Categories: iOS, Android Phone, and more.
  • Total: 6
Number of Microsoft Teams daily unique users by device type.Count
office365_microsoftteams_DailyActivitiesByActivityType

Number of Microsoft Teams activities by activity type.
  • Categories: Calls, Meetings, and more
  • Total: 4
Number of Microsoft Teams activities by activity type.Count
office365_microsoftteams_DailyUniqueUsersByActivityType

Number of Microsoft Teams unique users by activity type.
  • Categories: Calls, Meetings, and more
  • Total: 5
Number of Microsoft Teams users by activity typeCount
office365_microsoftteams_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Teams Status
office365_microsoftteams_IncidentCount

service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Microsoft Teams Incident CountCount
office365_microsoftteams_ServiceOutageInHours

The number of hours service has been out of order.
Microsoft Teams Service Outage in HoursHours
OneDriveForBusinessoffice365_onedrive_ActiveUserCount

Total number of interactions with OneDrive without respect to the uniqueness of the user.
  • Categories: Viewed Or Edited, Synced, and more
  • Total: 4
Number of users who interacted with OneDriveCount
office365_onedrive_UniqueUserCount

Number of unique users who in any way interacted with OneDrive.
  • Categories: Viewed Or Edited, Synced, and more
  • Total: 4
Number of unique users who interacted with OneDriveCount
office365_onedrive_ActiveSiteCount

Number of active business sites in OneDrive.
Categories: total, active.
Number of active business sites in OneDriveCount
office365_onedrive_TotalFileCount

Total number of files in OneDrive.
Categories: total, active
Total number of files in OneDriveCount
office365_onedrive_Storage

Total storage consumed using OneDrive.
Total storage consumed using OneDriveGigabytes
office365_onedriveforbusiness_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
OneDrive for Business Status
office365_onedriveforbusiness_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
OneDrive for Business Incident CountCount
office365_onedriveforbusiness_ServiceOutageInHours

The number of hours service has been out of order.
OneDrive for Business Service Outage in HoursHours
OSDPPlatform (Microsoft 365 suite)office365_osdpplatform_ActiveUserCount

Number of users who interacted with specific services.
  • Categories: Exchange OneDrive, and more
  • Total: 7
Number of daily active user in specific services/td>Count
office365_osdpplatform_ActiveInactiveUserInServicesCount

Number of users if active or not in specific services.
  • Categories: Exchange Active, OneDrive Active, and more
  • Total: 14
Number of users with activity type in servicesCount
office365_osdpplatform_GroupActivityCount

Number of activities in groups with activity type.
  • Categories: number of exchange emails received, and more
  • Total: 4
Number of group activitiesCount
office365_osdpplatform_ActiveGroupCount

Number of groups. Categories: active, total
Number of group that have interacted with Office 365Count
office365_osdpplatform_Storage

Total storage consumed by all the users.
Categories: Mailbox Storage Used, Site Storage Used
Total storage consumed by all the usersGigabytes
office365_osdpplatform_FileCount

Total number of files used by all the.
Categories: active, total
Total number of files used by all the users.Count
office365_osdpplatform_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft 365 suite Status
office365_osdpplatform_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Microsoft 365 suite Incident CountCount
office365_osdpplatform_ServiceOutageInHours

The number of hours service has been out of order.
Microsoft 365 suite Service Outage in HoursHours
OrgLiveIDoffice365_orgliveid_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Identity Service Service Status
office365_orgliveid_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Identity Service Service Incident CountCount
office365_orgliveid_ServiceOutageInHours

The number of hours service has been out of order.
Identity Service Service Service Outage in Hours.Hours
Lyncoffice365_lync_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Skype for Business Status
office365_lync_IncidentCount

service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Skype for Business Incident CountCount
office365_lync_ServiceOutageInHours

The number of hours service has been out of order.
Skype for Business Service Outage in HoursHours
DynamicsCRMoffice365_dynamicscrm_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Dynamic 365 Apps Status
office365_dynamicscrm_IncidentCount

service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Dynamic 365 Apps Incident CountCount
office365_dynamicscrm_ServiceOutageInHours

The number of hours service has been out of order.
Dynamic 365 Apps Service Outage in HoursHours
RMSoffice365_rms_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Azure Information Protection Status
office365_rms_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Azure Information Protection Incident CountCount
office365_rms_ServiceOutageInHours

The number of hours service has been out of order.
Azure Information Protection Service Outage in HoursHours
MobileDeviceManagementoffice365_mobiledevicemanagement_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Mobile Device Management for Office 365 Status
office365_mobiledevicemanagement_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Mobile Device Management for Office 365 Incident Count.Count
office365_mobiledevicemanagement_ServiceOutageInHours

The number of hours service has been out of order.
Mobile Device Management for Office 365 Service Outage in HoursHours
Planneroffice365_planner_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Planner Status
office365_planner_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Planner Incident CountCount
office365_planner_ServiceOutageInHours

The number of hours service has been out of order.
Planner Service Outage in HoursHours
SwayEnterpriseoffice365_swayenterprise_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Sway Status
office365_swayenterprise_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Sway Incident CountCount
office365_swayenterprise_ServiceOutageInHours

The number of hours service has been out of order.
Sway Service Outage in HoursHours
PowerBIcomoffice365_powerbicom_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Power BI Status
office365_powerbicom_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Power BI Incident CountCount
office365_powerbicom_ServiceOutageInHours

The number of hours service has been out of order.
Power BI Service Outage in HoursHours
Intuneoffice365_Intune_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Intune Status
office365_Intune_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Microsoft Intune Incident CountCount
office365_Intune_ServiceOutageInHours

The number of hours service has been out of order.
Microsoft Intune Service Outage in HoursHours
StaffHuboffice365_staffhub_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Staffhub Status
office365_staffhub_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Microsoft Staffhub Incident CountCount
office365_staffhub_ServiceOutageInHours

The number of hours service has been out of order.
Microsoft Staffhub Service Outage in HoursHours
kaizalamessagingservicesoffice365_kaizalamessagingservices_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Kaizala Status
office365_kaizalamessagingservices_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Microsoft Kaizala Incident CountCount
office365_kaizalamessagingservices_ServiceOutageInHours

The number of hours service has been out of order.
Microsoft Kaizala Service Outage in HoursHours
Bookingsoffice365_bookings_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Bookings Status
office365_bookings_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Microsoft Bookings Incident CountCount
office365_bookings_ServiceOutageInHours

The number of hours service has been out of order.
Microsoft Bookings Service Outage in HoursHours
officeonlineoffice365_officeonline_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Office for the web Status
office365_officeonline_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Office for the web Incident CountCount
office365_officeonline_ServiceOutageInHours

The number of hours service has been out of order.
Office for the web Service Outage in HoursHours
O365Clientoffice365_o365client_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft 365 Apps Status
office365_o365client_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Microsoft 365 Apps Incident CountCount
office365_o365client_ServiceOutageInHours

The number of hours service has been out of order.
Microsoft 365 Apps Service Outage in HoursHours
PowerAppsoffice365_powerapps_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Power Apps Status
office365_powerapps_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Power Apps Incident CountCount
office365_powerapps_ServiceOutageInHours

The number of hours service has been out of order.
Power Apps Service Outage in HoursHours
PowerAppsM365office365_powerappsm365_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Power Apps in Microsoft 365 Status
office365_powerappsm365_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Power Apps in Microsoft 365 Incident CountCount
office365_powerappsm365_ServiceOutageInHours

The number of hours service has been out of order.
Power Apps in Microsoft 365 Service Outage in HoursHours
MicrosoftFlowoffice365_microsoftflow_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Power Automate Status
office365_microsoftflow_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Microsoft Power Automate Incident CountCount
office365_microsoftflow_ServiceOutageInHours

The number of hours service has been out of order.
Microsoft Power Automate Service Outage in HoursHours
MicrosoftFlowM365office365_microsoftflowm365_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Power Automate in Microsoft 365 Status
office365_microsoftflowm365_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Microsoft Power Automate in Microsoft 365 Incident CountCount
office365_microsoftflowm365_ServiceOutageInHours

The number of hours service has been out of order.
Microsoft Power Automate in Microsoft 365 Service Outage in HoursHours
Formsoffice365_forms_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Forms Status
office365_forms_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Microsoft Forms Incident CountCount
office365_forms_ServiceOutageInHours

The number of hours service has been out of order.
Microsoft Forms Service Outage in HoursHours
ProjectOnlineoffice365_projectonline_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Project Online Status
office365_projectonline_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Project Online Incident CountCount
office365_projectonline_ServiceOutageInHours

The number of hours service has been out of order.
Project Online Service Outage in HoursHours
ProjectForTheWeboffice365_projectfortheweb_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Project for the web Status
office365_projectfortheweb_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Project for the web Incident CountCount
office365_projectfortheweb_ServiceOutageInHours

The number of hours service has been out of order.
Project for the web Service Outage in HoursHours
Streamoffice365_stream_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Stream Status
office365_stream_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Microsoft Stream Incident CountCount
office365_stream_ServiceOutageInHours

The number of hours service has been out of order.
Microsoft Stream Service Outage in HoursHours
Vivaoffice365_viva_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Viva Status
office365_viva_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Microsoft Viva Incident CountCount
office365_viva_ServiceOutageInHours

The number of hours service has been out of order.
Microsoft Viva Service Outage in HoursHours
cloudappsecurityoffice365_cloudappsecurity_ServiceStatus

Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Defender for Cloud Apps Status
office365_cloudappsecurity_IncidentCount

Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons.
Provided information: resolved count, pending count, total count.
Microsoft Defender for Cloud Apps Incident CountCount
office365_cloudappsecurity_ServiceOutageInHours

The number of hours service has been out of order.
Microsoft Defender for Cloud Apps Service Outage in HoursHours