Set up credentials on the Azure portal

Register an app by following the steps mentioned in Register an application in Microsoft Entra ID.

Copy the values of two fields: Application (client) ID and Directory (tenant) ID. These credentials are later used in ePO - On-prem.

Select API permissions on the left pane under Manage and click Add a permission.

The Request API permissions page appears:

1. Select Microsoft Graph.

2. What type of permissions does your application require: Select Application permissions.

   Note

   We require Application permissions because our application runs a background service.

3. Use the Select permissions search and select the following:

   1. Device.Read.All

   2. Domain.Read.All

   3. Group.Read.All

   4. GroupMember.Read.All

   5. Organization.Read.All

   6. User.Read.All

   7. Directory.Read.All

4. Click Add Permissions.

5. On the API permissions page, click Grant admin consent for (Tenant Name) and select Yes. This selection gives pre-consent to the application using this registration to access the APIs under the specified permissions. If you signed in as a global administrator, consent is recorded for all users in the tenant that run the application. Otherwise, it applies only to your user account.

In the left pane, select Manage > Certificates & secrets, and click New client secret in the Client secrets tab.

1. Enter the following details:

   1. Description: Trellix ePO - On-prem.

   2. Expires: Select the period required. Custom allows for the date range to be specified.

2. Click Add.

3. Copy and save the string generated named Value. The string named Secret ID is not used or needed in this workflow.

   Note

   After you leave the page the value will not be visible again.