Azure Detailed Steps for User Credential Generation

Steps

1. App Registration
   1. In Azure Active Directory. Create a single tenant App registration, with a secret (https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal)
      
2. Add Permissions
   1. In API Permission option, Give permissions Directory Read All, and Application Read All. Once added, click Grant Admin consent for Default Directory.
3. Management Groups
   1. In the Tenant Root Group, option Access Control, add a Role Assignment with Contributor role for the registered app. (Alternatively, add it to the specific Mgmt groups intended to be analyzed).
4. Create App Registration Secret
   1. Go to Active Directory -> App Registration and select the newly created App Registration. In the left side menu select Certificates and Secrets and create a new Secret, and save the value for the Red Sentry Cloud configuration.
      
   2. From the Overview of the App Registration get the Client Id and the Tenant Id and save them for the Red Sentry Cloud configuration