How to onboard Microsoft 365 - How to get started with the Microsoft 365 data source. - Administrator Guide - Cortex CLOUD

Cortex Cloud Runtime Security Documentation

Product
Cortex Cloud Application Security > Cortex CLOUD
License
Cloud Runtime Security
Creation date
2024-12-24
Last date published
2026-06-04
Category
Administrator Guide
Abstract

How to get started with the Microsoft 365 data source.

Overview

You can add Microsoft 365 as a third-party data source in Cortex Cloud Data Security.

Danger

  • You have generated a Globally Unique Identifier (GUID), also known as a Universally Unique Identifier (UUID). You will need this ID for the tenant you want to use for the Microsoft 365 instance.

  • In order to use Microsoft 365, you must be registered with Microsoft Azure.

Configuration
  1. Navigate to SettingsData Sources & Integrations.

  2. On the Data Sources & Integrations page, click + Add New.

  3. On the Add Data Sources or Integrations page, search for Microsoft 365, then hover over it and click Add.

  4. On the Microsoft 365 integration instance settings page, do the following:

    1. In the Display Name field, enter a name for your Microsoft 365 integration instance.

    2. In the Tenant ID field, enter a tenant ID.

    3. In the Region list, select a region.

  5. Click Next.

Authorization
  1. On the Microsoft 365 Instance screen, if you are an administrator, click the click to authorize link.

  2. If you do not have administrator permissions, follow the instructions on screen and click Close.

The Microsoft 365 instance should now appear on the Data Sources screen under 3rd Party Data Sources.