@@ -13,17 +13,35 @@ To make API calls to Microsoft Graph, Elasticsearch requires Azure credentials w
13132 ) Click "Enterprise applications" and then "New application" to register a new application.
14143 ) Click "Create your own application", provide a name, and select the "Integrate any other application you don’t find in the gallery" option.
1515
16+ :::{image} ./images/ms-graph-authz/01-create-enterprise-application.png
17+ :alt: "create your own application" page
18+ :::
19+
1620## Configure the custom Application
1721
18221 ) In the [ Azure portal] ( https://portal.azure.com ) , go to Microsoft Entra ID.
19232 ) Under “App registrations”, then the “All applications” tab, find the application created in the previous section.
24+
25+ :::{image} ./images/ms-graph-authz/02-find-app-registration.png
26+ :alt: find your app registration
27+ :::
20283 ) Take note of the Application (client) ID and Tenant ID shown here - these will be needed to configure Elasticsearch later.
29+
30+ :::{image} ./images/ms-graph-authz/03-get-application-id.png
31+ :alt: get your application ID
32+ :::
21334 ) Under Manage > Certificates & secrets
2234 - Create a new client secret
2335 - Take note of the Value - this is needed later, and is only shown once
36+ :::{image} ./images/ms-graph-authz/04-create-client-secret.png
37+ :alt: get your client secret
38+ :::
24395 ) Under Manage > API permissions
2540 - Go to “Add a permission”
2641 - Choose “Microsoft Graph”
2742 - Choose “Application permissions”
2843 - Select “Directory.ReadWrite.All, Group.ReadWrite.All, User.Read.All”
2944 - Note that an Azure Admin will need to approve these permissions before the credentials can be used
45+ :::{image} ./images/ms-graph-authz/05-configure-api-permissions.png
46+ :alt: configure api permissions
47+ :::
0 commit comments