Skip to main content

Responses are generated using AI and may contain mistakes.

CollectorsCloud Collectors Administration Guide

Table of Contents

Prerequisites to Configure the Microsoft 365 Management Activity Cloud Collector

Before you configure the Microsoft 365 Management Activity Cloud Collector, complete the following prerequisite tasks:

  • Create a Microsoft Entra ID application – Includes creating and registering an application in the Microsoft Azure portal, generating authentication certificates and secrets, assigning API permissions, and granting administration consent.

    Caution

    Assigning the ActivityFeed.ReadDlp API permission in your Microsoft Entra ID application causes the ingestion of all DLP data, including any sensitive information, if present.

  • Add a shareable Microsoft account – Create an account in Exabeam Cloud Collectors that can be shared across multiple Microsoft collectors.

  • Review the required subscriptions for Microsoft 365 Management Activity – Includes a list of minimum subscriptions that are required to collect data from Microsoft 365 Management Activity.

Required Subscriptions for Microsoft 365 Management Activity

Before you can onboard a Microsoft 365 Management Activity collector, validate that your organization has the required subscriptions to collect data from specific data sources. Information about managing subscriptions can be found in the Microsoft Azure Active Directory fundamentals documentation.

The following table lists the minimum subscriptions required for each data source that can provide data to your Microsoft 365 Management Activity cloud collectors.

Data Source

Minimum Office 365 Subscription

Active Directory

E3

General

E3

Sharepoint

E3

Exchange

E3

DLP

E3