The M365 integration enables discovery of the following M365 services, providing visibility into service availability and performance for root cause analysis and remediation:
M365 Apps
M365 Azure Information Protection
M365 Bookings
M365 Dynamics 365 Apps
M365 Exchange Online
M365 Forms
M365 Identity Service
M365 Mobile Device Management
M365 Office for the web
M365 OneDrive for Business
M365 Planner
M365 Power Apps
M365 Power Apps in Microsoft 365
M365 Power Automate
M365 Power Automate in Microsoft 365
M365 Power BI
M365 SharePoint Online
M365 StaffHub
M365 Stream
M365 Suite
M365 Sway
M365 Teams
M365 Yammer Enterprise
Microsoft Defender for Cloud Apps
Microsoft Kaizala
Microsoft Viva
Project for the web
Project Online
Skype for Business
Microsoft Intune
After completing the integration installation and set up, Microsoft 365 resources are discovered and monitoring is enabled as specified in the configuration profile.
Step 1: Register the application with Azure AD
These steps register and authorize a new application to call the reports API.
Log in to the Azure portal using an administrator account.
From the Azure Services menu, Navigate to the App registrations page:
Select + New Registration.
Enter a display Name and select from the Support account types for who is authorized to access the API:
Click Register.
On the registration page, save the values in the Application (client) ID and Directory (tenant) ID fields. These are needed later to complete the
OpsRamp
part of the integration in Step 3: Configure the integration:
Step 2: Configure API permissions
Add a Microsoft Graph permission in the left navigation panel, click API permissions to add new permissions for the Microsoft Graph APIs:
Add a Microsoft Graph permission
Click + Add a permission to get a list of commonly used APIs:
You want to add a permission to the Microsoft Graph API. Select Microsoft Graph:
Click Application permissions to specify the type of permission needed:
Select the following permissions:
Permission
Description
User.Read.All
Permits you to sign in to the application with your organization account and enables the application to read your profile and basic company information.
Reports.Read.All
Permits the application to read all service usage reports without having a signed-in user. Services that provide usage reports include Office 365 and Azure Active Directory.
ServiceHealth.Read.All
Permits the application to read your tenant's service health information, without a signed-in user. Health information may include service issues or service health overviews.
Go to the API Permissions page and grant permission for all configured permissions by selecting Grant admin consent for xyz:
Add a client secret
In the left navigation panel, click Certificates & secrets:
Select + New client secret.
Add a Description and select a time duration for when the secret Expires:
Click Add.
Save the Value and Secret ID. These are needed later to complete the
OpsRamp
part of the integration in Step 3: Configure the integration:
Step 3: Configure the integration
From All Clients, select a client.
Go to Setup > Integrations and Apps. If there are already installed apps, it will redirect to the INSTALLED APPS page where all the installed apps are displayed. Click +ADD and search for the App on the Available apps page.
If there are no installed apps, it will navigate to the AVAILABLE APPS page.
Use the search option available to search for Office365 application. Alternatively, use All Categories dropdown to search. In this case, select Saas Application. All SAAS apps are displayed. Note: The search option is used to search for apps on a page.
ALL: All the existing and future resources will be discovered.
SELECT: You can select one or multiple resources to be discovered.
In the DISCOVERY SCHEDULE section, select Recurrence Pattern to add one of the following patterns:
Minutes
Hourly
Daily
Weekly
Monthly
Click Finish.The application is now installed and displayed on the Installed Integration page. Use the search field to find the installed application.
Next steps
After configuring the integration, M365 services discovery and monitoring is enabled. Discovered services and metrics can be viewed from the Infrastructure page.
No templates need to be applied on discovered devices. Alerts can be enabled using alert policies.
Supported metrics
Resource
Metric Name
Metric Display Name
Units
Exchange
office365_exchange_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Exchange Online Status
office365_exchange_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Exchange Online Incident Count.
Count
office365_exchange_ServiceOutageInHours
The number of hours service has been out of order.
Dynamic 365 Apps Service Outage in Hours.
Hours
office365_exchange_MailboxSizeTotal
Total storage consumption by all mailboxes
Mailbox Total Size
Gigabytes
office365_exchange_ActiveOrTotalMailboxCount
Number of mailboxes with active count. Active means the user sent/received or read a mail on that day. Categories: total count, active count
Active/total mailbox count
Count
office365_exchange_MailboxQuotaLimitCount
Number of mailboxes that have crossed a specific limit. Categories: Under Limit, Warning Issued, Send Prohibited, Send/Receive Prohibited
Number of mailboxes under quota limit count
Count
office365_exchange_MessagesTotalSentReadReceived
Number of messages sent, received, read, or any of these three by the organization in total. Categories: sent, received, read, total
Total messages sent/read/received
Count
office365_exchange_AppUsage
Number of users of different apps or protocols.
Categories: Mail for Mac, Outlook for Mac, Outlook For Windows,Outlook For Mobile,Other For Mobile,Outlook For Web.
Total: 9
Individual specific app usage in Exchange Online
Count
SharePoint
office365_sharepoint_UniqueUserCount Number of unique users who in any way interacted with SharePoint. Categories: Viewed Or Edited, Synced, Shared Internally, Shared Externally.
Number of unique users who interacted with Sharepoint in specific ways.
Count
office365_sharepoint_ActiveUserCount
Total number of interactions with SharePoint without respect to the uniqueness of the user.
Categories: Viewed Or Edited, Synced, and more.
Total: 5
Number of active users who interacted with Sharepoint in specific ways
Count
office365_sharepoint_PageVisitCount
Number of unique pages visited by users.
Number of unique pages visited by users.
Count
office365_sharepoint_ActiveFileCount
Number of files that have been interacted with on that day. Categories: total, active.
Number of files in SharePoint that have been interacted with.
Count
office365_sharepoint_TotalFileCount
Total number of files in SharePoint Categories: total, active.
Total number of files in SharePoint
Count
office365_sharepoint_Storage
Total storage consumed using SharePoint.
Total storage consumed using SharePoint
Gigabytes
office365_sharepoint_TotalPageVisitCount
Number of pages viewed across all sites. Provided info: page visit count.
Number of pages viewed across all sites
Count
office365_sharepoint_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Sharepoint Service Status
office365_sharepoint_IncidentCount
service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count,pending count, total count.
Sharepoint Online Incident Count
Count
office365_sharepoint_ServiceOutageInHours
The number of hours service has been out of order.
Sharepoint Online Service Outage in Hours
Hours
Yammer
office365_yammer_InteractionWithMessagesCount
Number of interactions with Yammer messages. Categories: liked, posted, read.
Number of unique users who interacted with Yammer messages. Categories: liked, posted, read.
Number of unique users who interacted with Yammer messages
Count
office365_yammer_UserCountByDeviceType
Number of users by device type interacting using Yammer.
Categories: web, iPhone, iPad, and more.
Total: 6
Number of users by device type interacting using Yammer
Count
office365_yammer_DailyUserCountByDeviceType
Number of daily users by device type interacting using Yammer.
Categories: web, iPhone, iPad, and more.
Total: 6
Number of daily users by device type interacting using Yammer
Count
office365_yammer_GroupCount
Number of groups in Yammer. Categories: total, active.
Number of groups in Yammer
Count
office365_yammer_InteractionInGroupsCount
Number of interaction with messages in Yammer groups. Categories: liked, posted, read.
Number of interaction with messages in Yammer groups
Count
office365_yammer_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Yammer Enterprise Status
office365_yammer_IncidentCount
service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Yammer Enterprise Incident Count
Count
office365_yammer_ServiceOutageInHours
The number of hours service has been out of order.
Number of Microsoft Teams unique users by activity type.
Categories: Calls, Meetings, and more
Total: 5
Number of Microsoft Teams users by activity type
Count
office365_microsoftteams_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Teams Status
office365_microsoftteams_IncidentCount
service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Microsoft Teams Incident Count
Count
office365_microsoftteams_ServiceOutageInHours
The number of hours service has been out of order.
Microsoft Teams Service Outage in Hours
Hours
OneDriveForBusiness
office365_onedrive_ActiveUserCount
Total number of interactions with OneDrive without respect to the uniqueness of the user.
Categories: Viewed Or Edited, Synced, and more
Total: 4
Number of users who interacted with OneDrive
Count
office365_onedrive_UniqueUserCount
Number of unique users who in any way interacted with OneDrive.
Categories: Viewed Or Edited, Synced, and more
Total: 4
Number of unique users who interacted with OneDrive
Count
office365_onedrive_ActiveSiteCount
Number of active business sites in OneDrive. Categories: total, active.
Number of active business sites in OneDrive
Count
office365_onedrive_TotalFileCount
Total number of files in OneDrive. Categories: total, active
Total number of files in OneDrive
Count
office365_onedrive_Storage
Total storage consumed using OneDrive.
Total storage consumed using OneDrive
Gigabytes
office365_onedriveforbusiness_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
OneDrive for Business Status
office365_onedriveforbusiness_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Number of users if active or not in specific services.
Categories: Exchange Active, OneDrive Active, and more
Total: 14
Number of users with activity type in services
Count
office365_osdpplatform_GroupActivityCount
Number of activities in groups with activity type.
Categories: number of exchange emails received, and more
Total: 4
Number of group activities
Count
office365_osdpplatform_ActiveGroupCount
Number of groups. Categories: active, total
Number of group that have interacted with Office 365
Count
office365_osdpplatform_Storage
Total storage consumed by all the users. Categories: Mailbox Storage Used, Site Storage Used
Total storage consumed by all the users
Gigabytes
office365_osdpplatform_FileCount
Total number of files used by all the. Categories: active, total
Total number of files used by all the users.
Count
office365_osdpplatform_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft 365 suite Status
office365_osdpplatform_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Microsoft 365 suite Incident Count
Count
office365_osdpplatform_ServiceOutageInHours
The number of hours service has been out of order.
Microsoft 365 suite Service Outage in Hours
Hours
OrgLiveID
office365_orgliveid_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Identity Service Service Status
office365_orgliveid_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Identity Service Service Incident Count
Count
office365_orgliveid_ServiceOutageInHours
The number of hours service has been out of order.
Identity Service Service Service Outage in Hours.
Hours
Lync
office365_lync_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Skype for Business Status
office365_lync_IncidentCount
service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Skype for Business Incident Count
Count
office365_lync_ServiceOutageInHours
The number of hours service has been out of order.
Skype for Business Service Outage in Hours
Hours
DynamicsCRM
office365_dynamicscrm_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Dynamic 365 Apps Status
office365_dynamicscrm_IncidentCount
service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Dynamic 365 Apps Incident Count
Count
office365_dynamicscrm_ServiceOutageInHours
The number of hours service has been out of order.
Dynamic 365 Apps Service Outage in Hours
Hours
RMS
office365_rms_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Azure Information Protection Status
office365_rms_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Azure Information Protection Incident Count
Count
office365_rms_ServiceOutageInHours
The number of hours service has been out of order.
Azure Information Protection Service Outage in Hours
Hours
MobileDeviceManagement
office365_mobiledevicemanagement_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Mobile Device Management for Office 365 Status
office365_mobiledevicemanagement_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Mobile Device Management for Office 365 Incident Count.
The number of hours service has been out of order.
Mobile Device Management for Office 365 Service Outage in Hours
Hours
Planner
office365_planner_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Planner Status
office365_planner_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Planner Incident Count
Count
office365_planner_ServiceOutageInHours
The number of hours service has been out of order.
Planner Service Outage in Hours
Hours
SwayEnterprise
office365_swayenterprise_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Sway Status
office365_swayenterprise_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Sway Incident Count
Count
office365_swayenterprise_ServiceOutageInHours
The number of hours service has been out of order.
Sway Service Outage in Hours
Hours
PowerBIcom
office365_powerbicom_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Power BI Status
office365_powerbicom_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Power BI Incident Count
Count
office365_powerbicom_ServiceOutageInHours
The number of hours service has been out of order.
Power BI Service Outage in Hours
Hours
Intune
office365_Intune_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Intune Status
office365_Intune_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Microsoft Intune Incident Count
Count
office365_Intune_ServiceOutageInHours
The number of hours service has been out of order.
Microsoft Intune Service Outage in Hours
Hours
StaffHub
office365_staffhub_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Staffhub Status
office365_staffhub_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Microsoft Staffhub Incident Count
Count
office365_staffhub_ServiceOutageInHours
The number of hours service has been out of order.
Microsoft Staffhub Service Outage in Hours
Hours
kaizalamessagingservices
office365_kaizalamessagingservices_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Kaizala Status
office365_kaizalamessagingservices_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
The number of hours service has been out of order.
Microsoft Kaizala Service Outage in Hours
Hours
Bookings
office365_bookings_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Bookings Status
office365_bookings_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Microsoft Bookings Incident Count
Count
office365_bookings_ServiceOutageInHours
The number of hours service has been out of order.
Microsoft Bookings Service Outage in Hours
Hours
officeonline
office365_officeonline_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Office for the web Status
office365_officeonline_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Office for the web Incident Count
Count
office365_officeonline_ServiceOutageInHours
The number of hours service has been out of order.
Office for the web Service Outage in Hours
Hours
O365Client
office365_o365client_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft 365 Apps Status
office365_o365client_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Microsoft 365 Apps Incident Count
Count
office365_o365client_ServiceOutageInHours
The number of hours service has been out of order.
Microsoft 365 Apps Service Outage in Hours
Hours
PowerApps
office365_powerapps_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Power Apps Status
office365_powerapps_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Power Apps Incident Count
Count
office365_powerapps_ServiceOutageInHours
The number of hours service has been out of order.
Power Apps Service Outage in Hours
Hours
PowerAppsM365
office365_powerappsm365_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Power Apps in Microsoft 365 Status
office365_powerappsm365_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Power Apps in Microsoft 365 Incident Count
Count
office365_powerappsm365_ServiceOutageInHours
The number of hours service has been out of order.
Power Apps in Microsoft 365 Service Outage in Hours
Hours
MicrosoftFlow
office365_microsoftflow_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Power Automate Status
office365_microsoftflow_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Microsoft Power Automate Incident Count
Count
office365_microsoftflow_ServiceOutageInHours
The number of hours service has been out of order.
Microsoft Power Automate Service Outage in Hours
Hours
MicrosoftFlowM365
office365_microsoftflowm365_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Power Automate in Microsoft 365 Status
office365_microsoftflowm365_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Microsoft Power Automate in Microsoft 365 Incident Count
Count
office365_microsoftflowm365_ServiceOutageInHours
The number of hours service has been out of order.
Microsoft Power Automate in Microsoft 365 Service Outage in Hours
Hours
Forms
office365_forms_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Forms Status
office365_forms_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Microsoft Forms Incident Count
Count
office365_forms_ServiceOutageInHours
The number of hours service has been out of order.
Microsoft Forms Service Outage in Hours
Hours
ProjectOnline
office365_projectonline_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Project Online Status
office365_projectonline_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Project Online Incident Count
Count
office365_projectonline_ServiceOutageInHours
The number of hours service has been out of order.
Project Online Service Outage in Hours
Hours
ProjectForTheWeb
office365_projectfortheweb_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Project for the web Status
office365_projectfortheweb_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Project for the web Incident Count
Count
office365_projectfortheweb_ServiceOutageInHours
The number of hours service has been out of order.
Project for the web Service Outage in Hours
Hours
Stream
office365_stream_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Stream Status
office365_stream_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Microsoft Stream Incident Count
Count
office365_stream_ServiceOutageInHours
The number of hours service has been out of order.
Microsoft Stream Service Outage in Hours
Hours
Viva
office365_viva_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Viva Status
office365_viva_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Microsoft Viva Incident Count
Count
office365_viva_ServiceOutageInHours
The number of hours service has been out of order.
Microsoft Viva Service Outage in Hours
Hours
cloudappsecurity
office365_cloudappsecurity_ServiceStatus
Service status of service that resembles current operability of the service using a number from 0-16.
Microsoft Defender for Cloud Apps Status
office365_cloudappsecurity_IncidentCount
Service Incident Count that clarifies the number of log entries by Microsoft for specific reasons. Provided information: resolved count, pending count, total count.
Microsoft Defender for Cloud Apps Incident Count
Count
office365_cloudappsecurity_ServiceOutageInHours
The number of hours service has been out of order.
Microsoft Defender for Cloud Apps Service Outage in Hours
Hours
## Risks, Limitations & Assumptions
* The availability is shown unknown for few resources even if it is enabled on the respective resource metrics. This is because of the presence of multiple native type resources under the same resource type.