How to create or add permissions for an Azure app (app registration) for SolarWinds Platform

This article provides step-by-step instructions how to create or add permissions for Azure Active Directory (AD) app in the Azure portal to provide access to the SolarWinds Platform when it polls Azure status and metrics for cloud monitoring, Microsoft Azure or Microsoft 365 API poller templates. 

The Azure AD app provides an access point with a set of permissions that allows an external application or service, such as the Orion Platform, to connect to the Azure Portal.

For more details about Azure AD, consult your Azure AD administrator.

Depending on how Azure subscriptions and permissions are configured, an account may require an Owner or User Access Administrator role with Microsoft.Authorization/*/Write access to add an Azure AD app for the SolarWinds Platform with a Reader role.

The Azure app must be configured to allow read access to the SolarWinds Platform to poll Azure for status and metrics.

To configure an Azure app for Microsoft Azure or Microsoft 365 API poller templates, please use the following instructions:
 

1. Login to Azure Portal
2. From the All Services menu, enter App registrations into the search bar.

3. From the App registration menu, click New registration

4. In the Name field, enter a friendly name for the SolarWinds environment
5. For Supported account types, leave as Accounts in this organizational directory only (Default Directory only - Single tenant)

6. Click Register
7. From the left pane under Manage, click API Permissions

8. Under Configured permissions, click Add a permission

9. From Request API Permissions, click Microsoft Graph
10. Click Application permissions

11. From the Select Permission menu, search for the required permissions
    • For Microsoft 365 Email Application Statistics, Microsoft 365 Exchange Mailboxes, Microsoft License Statistics, Microsoft 365 Mail Traffic, Microsoft 365 OneDrive, Microsoft 365 SharePoint and Microsoft 365 Teams, search for Report and select the checkbox for Reports.Read.All
    • For Microsoft 365 Admin Center, Microsoft 365 Exchange Online, and Microsoft 365 Mobile Device Management, search for ServiceHealth and select the checkbox for ServiceHealth.Read.All
    • For Microsoft 365 Group Statistics, two permissions are required:
      • Search for Directory and select the checkbox for Directory.Read.All
      • Search for Group and select the checkbox for Group.Read.All
12. Click Add permissions

Once the Azure app is created, review the Overview page to record the following details to be configured on the SolarWinds Platform:

• App name
• Application (client) ID 
• Directory (Tenant) ID
• Password/Secret Key

An Azure AD admin must authorize the endpoint before SAM can access the API.

For more information, see these Microsoft resources:

• Quickstart: Register an application with the Microsoft identity platform
• New Azure portal app registration training guide 
• Register an application with the Microsoft identity platform
• URLs to allow-list in firewalls to enable SolarWinds Platform functionality