« Microsoft Graph Authz Configuration properties »
Elastic Docs ›Elasticsearch Plugins and Integrations [8.19] ›Authentication plugins ›Microsoft Graph Authz

Configure Azure

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Configure Azure

edit

To make API calls to Microsoft Graph, Elasticsearch requires Azure credentials with the correct permissions.

Create a custom Azure application

edit
  1. Log in to the Azure portal and go to Microsoft Entra ID.
  2. To register a new application, click Enterprise applications > New application.
  3. Click Create your own application, provide a name, and select the Integrate any other application you don’t find in the gallery option.
create your own application

Configure the custom Application

edit
  1. In the Azure portal, go to Microsoft Entra ID.

  2. Under App registrations, select the All applications tab, and then find the application created in the previous section.

    find your app registration

  3. Take note of the Application (client) ID and Tenant ID shown here. These will be needed to configure Elasticsearch later.

    get your application ID

  4. Under Manage > Certificates & secrets

    • Create a new client secret.

    • Take note of your new client secret’s Value. This is needed later, and is only displayed once.

      get your client secret

  5. Under Manage > API permissions, do the following:

    1. Go to Add a permission.
    2. Choose Microsoft Graph.
    3. Choose Application permissions.

    4. Select Directory.ReadWrite.All, Group.ReadWrite.All, User.Read.All.

      An Azure Admin must approve these permissions before the credentials can be used.

      configure api permissions
« Microsoft Graph Authz Configuration properties »