Skip to content

Commit 6eda94a

Browse files
committed
Add MS permisssions
1 parent 32f73df commit 6eda94a

File tree

1 file changed

+32
-5
lines changed
  • src/content/docs/cloudflare-one/applications/casb/casb-integrations/microsoft-365

1 file changed

+32
-5
lines changed

src/content/docs/cloudflare-one/applications/casb/casb-integrations/microsoft-365/index.mdx

Lines changed: 32 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -7,8 +7,11 @@ rss: file
77
import { DirectoryListing, GlossaryTooltip, Render } from "~/components";
88

99
<Render
10-
file="casb/integration-description"
11-
params={{ integrationName: "Microsoft 365 (M365)", integrationAccountType: "Microsoft 365 account" }}
10+
file="casb/integration-description"
11+
params={{
12+
integrationName: "Microsoft 365 (M365)",
13+
integrationAccountType: "Microsoft 365 account",
14+
}}
1215
/>
1316

1417
This integration covers the following Microsoft 365 products:
@@ -36,13 +39,37 @@ For the Microsoft 365 integration to function, Cloudflare CASB requires the foll
3639
- `Files.Read.All`
3740
- `AuditLog.Read.All`
3841

39-
These permissions follow the principle of least privilege to ensure that only the minimum required access is granted. To learn more about each permission, refer to the [Microsoft Graph permissions documentation](https://docs.microsoft.com/en-us/graph/permissions-reference).
42+
These permissions follow the principle of least privilege to ensure that only the minimum required access is granted.
43+
44+
Additionally, to [remediate findings](/cloudflare-one/applications/casb/manage-findings/#remediate-findings), CASB requires the following permissions:
45+
46+
- `Application.ReadWrite.All`
47+
- `AuditLog.Read.All`
48+
- `Calendars.ReadWrite`
49+
- `Domain.ReadWrite.All`
50+
- `Files.ReadWrite.All`
51+
- `Group.ReadWrite.All`
52+
- `InformationProtectionPolicy.Read.All`
53+
- `MailboxSettings.ReadWrite`
54+
- `IdentityRiskyUser.ReadWrite.All`
55+
- `RoleManagement.ReadWrite.Directory`
56+
- `User.ReadWrite.All`
57+
- `UserAuthenticationMethod.ReadWrite.All`
58+
- `Directory.ReadWrite.All`
59+
- `GroupMember.ReadWrite.All`
60+
- `Organization.ReadWrite.All`
61+
- `Mail.ReadWrite`
62+
63+
To learn more about each permission, refer to the [Microsoft Graph permissions documentation](https://docs.microsoft.com/en-us/graph/permissions-reference).
4064

4165
## Security findings
4266

4367
<Render
44-
file="casb/security-findings"
45-
params={{ integrationName: "Microsoft 365", slugRelativePath: "microsoft-365" }}
68+
file="casb/security-findings"
69+
params={{
70+
integrationName: "Microsoft 365",
71+
slugRelativePath: "microsoft-365",
72+
}}
4673
/>
4774

4875
### User account settings

0 commit comments

Comments
 (0)