@@ -13,17 +13,33 @@ To make API calls to Microsoft Graph, Elasticsearch requires Azure credentials w
13
13
2 ) Click "Enterprise applications" and then "New application" to register a new application.
14
14
3 ) Click "Create your own application", provide a name, and select the "Integrate any other application you don’t find in the gallery" option.
15
15
16
+ :::{image} ./images/ms-graph-authz/01-create-enterprise-application.png
17
+ :alt: "create your own application" page
18
+ :::
19
+
16
20
## Configure the custom Application
17
21
18
22
1 ) In the [ Azure portal] ( https://portal.azure.com ) , go to Microsoft Entra ID.
19
23
2 ) Under “App registrations”, then the “All applications” tab, find the application created in the previous section.
24
+ :::{image} ./images/ms-graph-authz/02-find-app-registration.png
25
+ :alt: find your app registration
26
+ :::
20
27
3 ) Take note of the Application (client) ID and Tenant ID shown here - these will be needed to configure Elasticsearch later.
28
+ :::{image} ./images/ms-graph-authz/03-get-application-id.png
29
+ :alt: get your application ID
30
+ :::
21
31
4 ) Under Manage > Certificates & secrets
22
32
- Create a new client secret
23
33
- Take note of the Value - this is needed later, and is only shown once
34
+ :::{image} ./images/ms-graph-authz/04-create-client-secret.png
35
+ :alt: get your client secret
36
+ :::
24
37
5 ) Under Manage > API permissions
25
38
- Go to “Add a permission”
26
39
- Choose “Microsoft Graph”
27
40
- Choose “Application permissions”
28
41
- Select “Directory.ReadWrite.All, Group.ReadWrite.All, User.Read.All”
29
42
- Note that an Azure Admin will need to approve these permissions before the credentials can be used
43
+ :::{image} ./images/ms-graph-authz/05-configure-api-permissions.png
44
+ :alt: configure api permissions
45
+ :::
0 commit comments