Microsoft 365

Introduction

The M365 integration enables discovery of the following M365 services, providing visibility into service availability and performance for root cause analysis and remediation:

After completing the integration installation and set up, Microsoft 365 resources are discovered and monitoring is enabled as specified in the configuration profile.

Step 1: Register the application with Azure AD

These steps register and authorize a new application to call the reports API.

1. Log in to the Azure portal using an administrator account.

2. From the Azure Services menu, Navigate to the App registrations page:

   

3. Select + New Registration.

4. Enter a display Name and select from the Support account types for who is authorized to access the API:

   

5. Click Register.

6. On the registration page, save the values in the Application (client) ID and Directory (tenant) ID fields. These are needed later to complete the OpsRamp part of the integration in Step 3: Configure the integration:

   

Step 2: Configure API permissions

Add a Microsoft Graph permission in the left navigation panel, click API permissions to add new permissions for the Microsoft Graph APIs:

Add a Microsoft Graph permission

1. Click + Add a permission to get a list of commonly used APIs:

   

2. You want to add a permission to the Microsoft Graph API. Select Microsoft Graph:

   

3. Click Application permissions to specify the type of permission needed:

   

4. Select the following permissions:

   Permission	Description
   User.Read.All	Permits you to sign in to the application with your organization account and enables the application to read your profile and basic company information.
   Reports.Read.All	Permits the application to read all service usage reports without having a signed-in user. Services that provide usage reports include Office 365 and Azure Active Directory.
   ServiceHealth.Read.All	Permits the application to read your tenant's service health information, without a signed-in user. Health information may include service issues or service health overviews.

5. Go to the API Permissions page and grant permission for all configured permissions by selecting Grant admin consent for xyz:

   

Add a client secret

1. In the left navigation panel, click Certificates & secrets:

   

2. Select + New client secret.

   

3. Add a Description and select a time duration for when the secret Expires:

   

4. Click Add.

5. Save the Value and Secret ID. These are needed later to complete the OpsRamp part of the integration in Step 3: Configure the integration:

   

Step 3: Configure the integration

1. From All Clients, select a client.

2. Go to Setup > Account.

3. Select the Integrations and Apps tab.

4. The Installed Integrations page, where all the installed applications are displayed.
   Note: If there are no installed applications, it will navigate to the ADD APP page.

5. Click + ADD on the Installed Integrations page. The Available Integrations and Apps page displays all the available applications along with the newly created application with the version.
   Note: You can even search for the application using the search option available. Also you can use the All Categories option to search.

6. Click ADD under Office365:

   

7. In Add OFFICE365 page, enter account information:

   

   Property	Description
   Name	(required) User-defined, descriptive integration name.
   Subscription Id	(required) Azure subscription ID, from **Azure services > Subscriptions**.
   Client ID	(required) OpsRamp client ID saved from Step 1.
   Tenant ID	(required) OpsRamp tenant ID saved from Step 1.
   Security Key>	(required) Client secret ID saved from the Add an Office 365 Management API permission step.
   Confirm Security Key	(required) Re Enter the Security Key.

8. Click Next.In the RESOURCE TYPE section, select:

   • ALL: All the existing and future resources will be discovered.
   • SELECT: You can select one or multiple resources to be discovered.

9. In the DISCOVERY SCHEDULE section, select Recurrence Pattern to add one of the following patterns:

   • Minutes
   • Hourly
   • Daily
   • Weekly
   • Monthly

     

10. Click Finish.
    The application is now installed and displayed on the Installed Integration page. Use the search field to find the installed application.

Next steps

After configuring the integration, M365 services discovery and monitoring is enabled. Discovered services and metrics can be viewed from the Infrastructure page.

No templates need to be applied on discovered devices. Alerts can be enabled using alert policies.

Risks, Limitations & Assumptions

The availability is shown unknown for few resources even if it is enabled on the respective resource metrics. This is because of the presence of multiple native type resources under the same resource type.

Probable list of health statuses

See serviceHealthStatus values for more details.

Supported metrics