Microsoft Azure Active Directory Monitoring - Script Configuration

Azure AD application PowerShell configuration script Direct link to this section

The PowerShell configuration script is used to configure Azure Active Directory (AD) for Microsoft 365, Azure, or Office 365 (O365) Government Community Cloud (GCC) High. This script:

• Checks that the required prerequisites to run the script are satisfied. For example, it requires a Windows machine with PowerShell version 5.x.

  Tip: Run $PSVersionTable to verify your PowerShell version.

• Creates the Azure AD application and its associated service principal.

• Assigns the required permissions to the service principal.

• (Azure monitoring only) Assigns the required roles to the service principal for monitoring the Azure subscription.

• Generates a zip file that contains a text file with the application credentials. These are the credentials that you submit to Arctic Wolf®, so that your Concierge Security® Team (CST) can provision security monitoring.

• Launches your default web browser with the newly generated Uniform Resource Identifier (URI), to grant administrator consent for the permissions assigned to the application.

  Note: An administrator in your Azure AD tenant must authenticate to this URI and accept the permissions that the application requests.