Azure and Office365 – Plugin pre-requisites

Azure / Office 365 Standard Configuration

Registration of the ServiceNav application on the tenant

Declaring the ServiceNav application in the Azure AD

  • Login to the Azure Management Portal.

  • Left menu: “Azure Active Directory”
  • Select “App registrations”
  • Make “New registration”

  1. Name: ServiceNav
  2. Account types supported: Accounts in this organizational directory only (DOMAIN)

Then “Register”

We get:

The ServiceNav application is registered.

 

Creating a key for the application

  • Click on “Certificates & Secrets”
  • Click on “New client secret”
    • Description: key name
    • Expires: choose whether the key expires; beware if it expires then checks will no longer work.

  • Click on “Add”

Be sure to save the key because it will not be visible later!

Specific Azure Configuration

Give the ServiceNav application permission to use the Azure APIs

  • On the left pane, click on “Resource Groups”, select the resource group and then “Access Control (IAM)”.
  • Cick on “Add”
    • Role: Reader
    • Select: start typing the name of the previously created application and select it
    • Save

The application now has the right to request and use the token for Azure APIs.

Using Azure service checks

To use Azure checks, you must have:

  • Tenant ID

Click on “Azure Active Directory”
Click on “Properties”
Here you will find the Tenant ID

  • Application ID

Click on “Azure Active Directory”
Click on “Application registration”
Click on the application created for ServiceNav

  • Application secret

To be saved when created

  • Subscription ID

Click on “Resource Group”
Select the resource group where the virtual machine is located.

Retrieve the Subscription ID

 

Office 365 Specific Configuration

Give ServiceNav permission to use Microsoft Graph Office 365 APIs:

To monitor Office 365 metrics (monitoring of mailboxes, licenses, users, etc …):

  • On the left-side menu of the Azure portal, select “Azure Active Directory”, “App Registrations”
  • Select the previously created ServiceNav application.
  • If it does not appear, select “All Applications”:

  • Click on “API permissions” then “Add a permission”:

  • Select “Microsoft Graph”

  • Select “Application Permissions”
  • In the search field, type “reports”
  • Check “Reports.Read.All”

Then “Add permissions”.

  • Apply the changes:

Click on “” Grant administrator consent for * DOMAIN * “then” Yes “:

Ensure Grant permissions are applied, otherwise the addition is not applied.

 

Give permission to use the Office 365 Management APIs (to obtain the status of the O365 services)

To use the MS-Office365-Health service check:

  • On the left-side menu of the Azure portal, go to “Azure Active Directory”, “Application Listings”
  • Select the previously created ServiceNav application
  • If it does not appear, select “All Applications”:

 

  • Click on “Settings” then “Required Permissions” and “Add”

  • Select “Office 365 Management APIs”

  • Select “Application Permissions”
  • In the search field, type “health”
  • Check “ServiceHealth.Read”

  • Apply the changes:Click on “” Grant administrator consent for * DOMAIN * “then” Yes “:

 

This results in:

Ensure Grant permissions are applied, otherwise the addition is not applied.

 

 

UK ServiceNav Product Development Manager; my priority is to be needful of the particular requirements of all ‘English-speaking’ markets where ServiceNav is sold. I have over 20 years experience of the IT monitoring field - covering a wide variety of products and technologies.