Office 365 User Account requires Global Administrator Rights
Article ID: 129444
Updated On:
Products
Issue/Introduction
As per the office 365 probe documentation, it is listed "Verify that the Office 365 user has the Global Administrator access rights" under Prerequisites section.
https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/ca-unified-infrastructure-management-probes/GA/alphabetical-probe-articles/office365-office-365-monitoring/office365-office-365-monitoring-release-notes.html
1. Is it not possible to use the read only access to monitor Office 365 environment?
2. If Global Administrator access rights are mandatory, is it ok to give the global admin access to the components which we want monitor alone?
3. Please provide the details on why we need "Global Administrator access rights".
Environment
UIM 9.0.2
office 365 probe version 1.00
Resolution
1. Is it not possible to use the read only access to monitor Office 365 environment?
[response]: Microsoft documentation states the user should have global administrator privileges to register application in Azure AD and access APIs to monitor.
2. If Global Administrator access rights are mandatory, is it ok to give the global admin access to the components which we want monitor alone?
[response]: Global administrator access rights are mandatory to access office365 APIs. Using credentials office365 app will be registered in Azure AD cloud. While registering application we are providing access to only those application which are monitoring.
These are documented here:
https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/ca-unified-infrastructure-management-probes/GA/alphabetical-probe-articles/office365-office-365-monitoring/office365-office-365-monitoring-release-notes.html#concept.dita_f9838e3abf1efcda543d7734cbeff5387137b273_Prerequisites
3. Please provide the details on why we need "Global Administrator access rights".
[response]: Answer is available in 1 and 2 questions.
Feedback
