Office365 probe API permissions are outdated in documentation

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

The documentation for the Office365 probe lists several API permissions which the probe requires from the MS/Azure side, but these do not appear to be valid.

 

Cause

The table below shows the API permissions from the documentation.  Those which are highlighted are currently valid and those which are not highlighted are deprecated and no longer required by the probe.

 

 

Resolution

The equivalent Office365 API names are as follows:

Microsoft Graph API:

- Directory.Read.All

Under "Office365 Management APIs":

- ActivityFeed.Read
- ActivityFeed.ReadDlp
- ServiceHealth.Read

This should provide sufficient permissions for the probe to operate.

Here are example screenshots from Azure:

 

Note that two types of permissions are available -- Delegated and Application permissions.  The probe requires the same permissions to be enabled in both types.