EV Observe - Configure Azure and Microsoft 365 Monitoring Prerequisites

Last modified on 2023/03/16 17:08

You can monitor Azure PaaS objects using the Microsoft Azure API, e.g. HTTP request response time, loading time for a web page, HTTP queue length, etc.

Likewise, you can monitor Microsoft 365 using the Microsoft Graph Office 365 API, e.g. Exchange Online inbox usage, Teams activity, Microsoft 365 license usage, etc.

To use service templates based on Azure and Microsoft 365 services, specific prerequisites must first be met.

  • You configure these prerequisites once only.
  • This is done in three steps:
    • Register the EV Observe Web app on the Azure portal
    • Add permissions to enable the EV Observe Web app to use the Azure API and Microsoft Graph Office 365 API and access the relevant resources
    • Retrieve the information required for configuring Azure services

Caution

  • A client secret is required for using the Azure API. Once it expires, services will no longer be operational.
  • Permissions must be granted before you can use the Microsoft Graph API. If permissions are not granted, Office 365 metrics will not be monitored.

Procedure: How to configure Azure and Microsoft 365 monitoring prerequisites

Step 1: Register the EV Observe Web app on the Azure portal

Open url.png See the detailed procedure

1. Declare the EV Observe Web app in Azure AD.

  • Log in to the Azure portal using your Azure account.
  • Select Azure Active Directory > App registrations in the left pane.
  • Click + New registration.
             App registration - Creation.png
  • Specify the information required for registering the application.
    • Name: Enter the name of the new Azure AD EV Observe app.

      example  ServiceNav

    • Supported account types: Select the option called Accounts in this organizational directory only.
  • Click Register.
  • The Azure AD EV Observe app will be created and registered on the Azure portal.
  • Its IDs will be displayed.
    App registration - App with IDs created.png

2. Create the client secret for the new Azure AD EV Observe app.

  • Select Certificates & secrets in the left pane.
  • Click + New client secret.
             Certificates and secrets - Properties.png
  • Specify the information required for creating the client secret.
    • Description: Enter the description of the client secret. Note: The default value will be used if you do not specify this field.
    • Expires: Select the validity end date for the client secret.

Caution: Once it expires, services will no longer be operational.

Best Practice icon.png  Select Never to avoid renewing the client secret as well as the risk of forgetting to do so.

  • Click Add.
  • The client secret will be generated.
  • Its value will be displayed.
    Certificates and secrets - Secret client created.png

3. Click Copy icon.png to copy the client secret of the app and paste it in a text editor. It will be required for configuring Azure services.

Caution: The value of the new client secret can be retrieved only during this step. Once you move on to the next step, the client secret will be hidden using the * character. If you lose the client secret, you must regenerate a new one.

Step 2: Add permissions to enable the Azure AD EV Observe app to use APIs

Step 2.a: Permissions for using the Azure API

Note: Only if you want to configure Azure services

1. Grant permission to use the Azure API resources.

  • Click Resource groups in the left pane and select the relevant resource group.
  • Select Access control (IAM) in the left pane.
  • Click Add.

       API Azure - IAM Properties.png

2. Complete the information required.

  •  Role: Select the Reader value.
  • Select: Select the name of the Azure AD EV Observe app you created in step 1.
  • Click Save.

The Azure AD EV Observe app can now request and use the token for the Azure API.

Step 2.b: Permissions for using the Microsoft Graph Office 365 API

Note: Only if you want to configure Microsoft 365 services

1. Select the type of permission to used the Microsoft Graph Office 365 API.

  • Select Azure Active Directory > App registrations in the left pane.
  • Select the Azure AD EV Observe app you created in step 1.

Best Practice icon.png  Click All apps if your app does not appear.

  • Click + Add a permission.
  • Select the Microsoft Graph API.
             API permissions - Selection MS Graph API.png
  • Select Application permissions.
             API permissions - Selection MS Graph API - Application permissions.png

2. Select and check the boxes for the permissions below.

  • Reports.Read.All
  • ServiceHealth.Read.All
     

Best Practice icon.png  Use the search field to filter permissions.
       API Microsoft Graph - Permission Reports read all.png

3. Click Add permissions.

4. Click Grant admin consent for <votre tenant> to grant consent for the requested permissions.

Caution: If you do not grant consent, the permissions for using the Microsoft Graph API for monitoring Microsoft 365 metrics will not be taken into account.

 

Step 3: Retrieve the information required for configuring Azure services

Note: Only if you want to configure Azure services

1. Retrieve the directory (tenant) ID.

  • Select Azure Active Directory > Properties in the left pane.
  • Copy the value in the Directory ID field.

  Prerequisites specific to Azure - Retrieve Tenant ID.png

2. Retrieve the application ID of the Azure AD EV Observe app.

  • Select Azure Active Directory > App registrations in the left pane.
  • Select the Azure AD EV Observe app you created in step 1.
  • Copy the value in the Application (client) ID field.

  Prerequisites specific to Azure - Retrieve Application ID.png

3. Retrieve the client secret (application secret) you pasted in the text editor in step 1.2.

  Prerequisites specific to Azure - Retrieve Application secret.png

4. Retrieve the subscription ID.

  • Select Resource group in the left pane.
  • Select the resource group where your virtual machine is located.
  • Copy the value in the Subscription ID field.

  Prerequisites specific to Azure - Retrieve Subscription ID.png

Tags:
Created on 2022/08/11 19:05
Powered by XWiki © EasyVista 2022