ms data.md

For the complete documentation index, see llms.txt. Markdown versions of documentation pages are available by appending .md to page URLs; this page is available as Markdown.

Microsoft (MS 365 etc)

Microsoft Integrations

Dropzone AI integrates with Microsoft 365/Microsoft Defender, Microsoft Sentinel, and Microsoft Azure. This document serves as an overview for performing certain steps of their integration. Further information on how to perform the integrations for Microsoft 365/Defender, Microsoft Sentinel, and Microsoft Azure can be found on their separate pages.

Integration Overview

To enable these integrations you will perform the following actions:

Register a New Application in Microsoft Entra Admin Center

{% hint style="info" %} Microsoft's documentation for registering an application is available at https://learn.microsoft.com/en-us/graph/auth-register-app-v2 {% endhint %}

Navigate to App Registrations

Registering the Dropzone AI Application

Client ID, Tenant ID, and Client Secret

Once the application has been created, it will redirect you to the application's Overview page.

{% hint style="info" %} Microsoft's documentation for creating client credentials for an application is available here {% endhint %}

Copy the integration details

Add a certificate or secret

Create a new client secret

{% hint style="warning" %} Your Dropzone integration will stop working when the client secret expires. Consider setting a calendar reminder to update the key prior to expiration. For convenience's sake, we recommend picking a longer expiration date, to limit the number of times the client secret must be updated. {% endhint %}

Add client secret

Copy the Client Secret Value

{% hint style="danger" %} This value is not shown after you leave this page - be sure to record it immediately. {% endhint %}

Set Application Permissions

Navigate to API permissions

Add a permission

{% hint style="info" %} Depending on the integration you are performing, you will need to add different permissions. See Microsoft 365/Microsoft Defender, Microsoft Sentinel, or Microsoft Azure for more details. For the purpose of this overview, the Microsoft Graph API has been used. {% endhint %}

Select Microsoft Graph

For example, add the SecurityEvents.Read.All permission

Once back in the Application API permissions page, you should now see the permissions, such as the following:

(Example permissions)

Grant admin consent

Grant admin consent

You should now see all the required permissions listed with a green check mark

(Completed permissions)