Cloud Configuration - Azure Cloud

Onboarding Azure account

How to configure in ADAudit Plus :

Go to Azure AD tab, then Threat sub-tab, you will be navigated to Cloud Directory page. Click on Add Cloud Directory
Select Azure Cloud
Enter the Display Name, Tenant Name, Client ID, Client Secret, Subscription ID, Cloud Type.
Select the Audit Log checkbox if you want to fetch and monitor all activities happening within your Azure environment
Click on Next
Review your configuration and click on Finish

App Creation in Azure Portal:

Manual Creation

Navigate to the Microsoft Entra ID(previously Azure AD) page after logging into the Azure portal.
Click on App Registrations and then on New Registration.
Provide a name eg: ADAP-APP, leaving other options as default and click Register.
In the app's Overview page, click on Certificates & secrets, and add a new client secret by clicking on New client secret. Remember to copy the Client secret value.
Copy down the Application ID from the app's Overview page.
Navigate to the Subscriptions page in the portal and select the subscription you want to configure in ADAudit Plus.
Select the Access control (IAM) page, click Add and Add role assignment.
Search and select the Reader role and click next.
Click on Select Members. Search for the name of the app and click Select.
Click on Review + Assign.
Repeat step 6 to step 8 for the following roles.

If you would like ADAudit Plus to verify policies against your keys in Azure Key Vaults then follow the steps below.

Navigate to the Azure Key Vault resource you would like to monitor.
If you have selected Vault Access Policy in Access Configuration settings

Click on Access Policies, then on Create, and check the list checkbox under All Key, Secret, and Certificate permissions.

If you have selected Azure role-based access control (recommended) under Access Configuration settings

Click on Access control (IAM), and add Key Vault Contributor role for the app following step 7 to step 10.

Activity log: Fetches and shows all the Operations performed on the Cloud Account Services