You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CloudAppSecurityDocs/api-authentication-user.md
+20-14Lines changed: 20 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -25,8 +25,8 @@ In general, you need to take the following steps to use the APIs:
25
25
This page explains how to create a Microsoft Entra application, get an access token to Microsoft Defender for Cloud Apps and validate the token.
26
26
27
27
>[!NOTE]
28
-
> When accessing Microsoft Defender for Cloud Apps API on behalf of a user, you will need the correct Application permission and user permission.
29
-
> If you are not familiar with user permissions on Microsoft Defender for Cloud Apps, see [Manage admin access](manage-admins.md).
28
+
> When accessing Microsoft Defender for Cloud Apps API on behalf of a user, you'll need the correct Application permission and user permission.
29
+
> If you aren't familiar with user permissions on Microsoft Defender for Cloud Apps, see [Manage admin access](manage-admins.md).
30
30
31
31
>[!TIP]
32
32
> If you have the permission to perform an action in the portal, you have the permission to perform the action in the API.
@@ -57,31 +57,37 @@ This page explains how to create a Microsoft Entra application, get an access to
57
57
58
58
1. Allow your Application to access Microsoft Defender for Cloud Apps and assign it 'Read alerts' permission:
59
59
60
-
- On your application page, select **API Permissions** > **Add permission** > **APIs my organization uses** > type *Microsoft Cloud App Security* and then select **Microsoft Cloud App Security**.
60
+
1. On your application page, select **API Permissions** > **Add permission** > **APIs my organization uses** > type *Microsoft Cloud App Security* and then select **Microsoft Cloud App Security**.
61
61
62
-
-**Note**: *Microsoft Cloud App Security* doesn't appear in the original list. Start writing its name in the text box to see it appear. Make sure to type this name, even though the product is now called Defender for Cloud Apps.
62
+
> [!NOTE]
63
+
> *Microsoft Cloud App Security* doesn't appear in the original list. Start writing its name in the text box to see it appear. Make sure to type this name, even though the product is now called Defender for Cloud Apps.
63
64
64
65


69
+
:::image type="content" source="media/application-permissions-public-client.png" alt-text="Screenshot showing how to add application permissions.":::
69
70
70
-
-**Important note**: Select the relevant permissions. **Investigation.Read** is only an example. For other permission scopes, see [Supported permission scopes](#supported-permission-scopes)
71
71
72
-
- To determine which permission you need, view the **Permissions** section in the API you're interested to call.
72
+
> [!NOTE]
73
+
> Select the relevant permissions. **Investigation.Read** is only an example. For other permission scopes, see [Supported permission scopes](#supported-permission-scopes)
73
74
74
-
- Select **Grant admin consent**
75
+
1. To determine which permission you need, view the **Permissions** section in the API you're interested to call.
75
76
76
-
**Note**: Every time you add permission you must select **Grant admin consent** for the new permission to take effect.
77
+
1. Select **Grant admin consent**
77
78
78
-

79
+
> [!NOTE]
80
+
> Every time you add permission you must select **Grant admin consent** for the new permission to take effect.
79
81
80
-
1. Write down your application ID and your tenant ID:
82
+
:::image type="content" source="media/api-authentication-application/grant-consent.png" alt-text="Screenshot that shows the option to grant admin consent." lightbox="media/api-authentication-application/grant-consent.png":::
81
83
82
-
- On your application page, go to **Overview** and copy the following information:
83
84
84
-

85
+
1. Write down your application ID and your tenant ID.
86
+
87
+
1. On your application page, go to **Overview** and copy the following information:
88
+
89
+
:::image type="content" source="media/api-authentication-application/app-and-tenant-ids.png" alt-text="Screenshot that shows the created app ID." lightbox="media/api-authentication-application/app-and-tenant-ids.png":::
0 commit comments