@@ -13,17 +13,33 @@ To make API calls to Microsoft Graph, Elasticsearch requires Azure credentials w
13132 ) Click "Enterprise applications" and then "New application" to register a new application.
14143 ) Click "Create your own application", provide a name, and select the "Integrate any other application you don’t find in the gallery" option.
1515
16+ :::{image} ./images/ms-graph-authz/01-create-enterprise-application.png
17+ :alt: "create your own application" page
18+ :::
19+
1620## Configure the custom Application
1721
18221 ) In the [ Azure portal] ( https://portal.azure.com ) , go to Microsoft Entra ID.
19232 ) Under “App registrations”, then the “All applications” tab, find the application created in the previous section.
24+ :::{image} ./images/ms-graph-authz/02-find-app-registration.png
25+ :alt: find your app registration
26+ :::
20273 ) Take note of the Application (client) ID and Tenant ID shown here - these will be needed to configure Elasticsearch later.
28+ :::{image} ./images/ms-graph-authz/03-get-application-id.png
29+ :alt: get your application ID
30+ :::
21314 ) Under Manage > Certificates & secrets
2232 - Create a new client secret
2333 - Take note of the Value - this is needed later, and is only shown once
34+ :::{image} ./ms-graph-authz/04-create-client-secret.png
35+ :alt: get your client secret
36+ :::
24375 ) Under Manage > API permissions
2538 - Go to “Add a permission”
2639 - Choose “Microsoft Graph”
2740 - Choose “Application permissions”
2841 - Select “Directory.ReadWrite.All, Group.ReadWrite.All, User.Read.All”
2942 - Note that an Azure Admin will need to approve these permissions before the credentials can be used
43+ :::{image} ./ms-graph-authz/05-configure-api-permissions.png
44+ :alt: configure api permissions
45+ :::
0 commit comments