Add an Azure Active Directory Account on Prisma Cloud

Authorize an Azure Active Directory application to read user profile information.

Watch it.

Log in to the Azure portal.

Select

Azure Active Directory

App Registrations

.

Select the application from the list and select

API Permissions

Add a Permission

.

Select

Microsoft Graph

Application Permissions

This allows you to allow the application to access the Microsoft Graph APIs.

Select the permission

user.read.all

, and

Add Permission

.

The permission you added allows the app to read user profiles without a signed in user.

This permission requires admin consent. An Azure AD tenant administrator must grant these permissions by making a call to the admin consent endpoint.



Collect the details for the Active Directory app.

Log in to the Azure portal.

Get the

Directory (tenant) ID

.



Get the

Application (client) ID

and

Object ID

.

You must enter the Object ID as the Enterprise Application Object ID in Step 3-d.



Get the

Application Key

.



Add your Azure Active Directory on Prisma Cloud.

Access Prisma Cloud and select

Settings

Cloud Accounts

Add New

.

Enter a

Cloud Account Name

.

Select

Onboard using Azure Active Directory

Select

Cloud Type

Azure and the

Commercial

or

Government

environment where your AD resources are deployed, click

Next

.

Enter your Azure

Directory (Tenant) ID

,

Application (Client) ID

,

Application Client Secret

and

Enterprise Application Object ID

.





Select the

Account Groups

you want to add and click

Next

.

You must assign each cloud account to an account group, and Create an Alert Rule for Run-Time Checks to associate the account group with it to generate alerts when a policy violation occurs.

Verify the

Status

and

Done

to save your changes.

If Prisma Cloud is able to validate the credentials by making an authentication call using the credentials provided in the previous step, it displays a green check mark.



Verify that you can view the information on your Azure Active Directory users on Prisma Cloud.

Log in to Prisma Cloud.

Select

Investigate

and enter the following RQL query to view details on your Azure Active Directory users.

config where cloud.type = 'azure' AND api.name = 'azure-active-directory-user' AND json.rule = userType equals "Guest"