Navigate to [https://portal.azure.com/#home](https://portal.azure.com/#home)

In your Azure Portal head over to App registrations. You can easily do this by searching for "App registrations" in the search box.

Choose the Service Principal you created for CloudMonitor. You can type in the Name or Application (client) ID. In this example we're using "CloudMonitor-SP-CustomerGani"

Under the "Microsoft APIs" tab, click "Microsoft Graph"

Take advantage of the tremendous amount of data in Office 365, Enterprise Mobility + Security, and Windows 10. Access Azure AD, Excel, Intune, Outlook/Exchange, OneDrive, OneNote, SharePoint, Planner, and more through a single endpoint.

Application permissions
Your application runs as a background service or daemon without a signed-in user.

Search and check all the following permission:
CallRecords.Read.All
Directory.Read.All
Reports.Read.All
SecurityAlert.Read.All
SecurityEvents.Read.All
TeamMember.Read.All

After checking all permissions listed above click "Add permissions"

Make sure that your permissions are granted by the Admin.

Note: Only Admin are allowed to grant consent. Refer to next screenshot

This is a screenshot of what the Admin will see when granting consent.

*Only for Admins

After the new permissions are granted by the Admin, it should look like this.

The "Admin consent required" column shows the default value for an organization. However, user consent can be customized per permission, user, or app. This column may not reflect the value in your organization, or in organizations where this app will be used.  Learn more
Configured permissions
Applications are authorized to call APIs when they are granted permissions by users/admins as part of the consent process. The list of configured permissions should include all the permissions the application needs. Learn more about permissions and consent
Add a permission
Grant admin consent for Data-Driven AI
API / Permissions name
	
Type
	
Description
	
Admin consent required
	
Status
	
Microsoft Graph (7)
	
	
	
	
	

CallRecords.Read.All
	
Application
	
Read all call records
	
Yes
	
 Granted for Data-Driven AI
	

Directory.Read.All
	
Application
	
Read directory data
	
Yes
	
 Granted for Data-Driven AI
	

Reports.Read.All
	
Application
	
Read all usage reports
	
Yes
	
 Granted for Data-Driven AI
	

SecurityAlert.Read.All
	
Application
	
Read all security alerts
	
Yes
	
 Granted for Data-Driven AI
	

SecurityEvents.Read.All
	
Application
	
Read your organization’s security events
	
Yes
	
 Granted for Data-Driven AI
	

TeamMember.Read.All
	
Application
	
Read the members of all teams
	
Yes
	
 Granted for Data-Driven AI
	

User.Read
	
Delegated
	
Sign in and read user profile
	
No
	
 Granted for Data-Driven AI
	
To view and manage consented permissions for individual apps, as well as your tenant's consent settings, try Enterprise applications.

Azure

Microsoft Teams is a messaging app for organizations and part of the Microsoft 365 family of products. Get answers to your most commonly asked questions on how to use Teams, such as how to schedule messages in Teams, how to change your background in a Teams meeting, how to update your Teams status, and much more.

How to Add Permissions required for CloudMonitor to access M365 data.