Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Connectivity Requirements
Office 365 requires connectivity to the internet. The endpoints listed here should be reachable.
The setup of the Microsoft Assessment Microsoft Entra Application requires access to the following endpoints:
aadcdn.msauth.net:443
az818661.vo.msecnd.net:443
c.urs.microsoft.com:443
go.microsoft.com:443
iecvlist.com:443
ieonline.microsoft.com:443
login.microsoftonline.com:443
oneget.org:443
ongetcdn.azureedge.net:443
psg-prod-eastus.azureedge.net:443
www.powershellgallery.com:443
Setting up the Microsoft Entra Application
Open the Windows PowerShell command prompt with [Run as Administrator] on the Data Collection Machine.
Run the following command.
New-MicrosoftAssessmentsApplication -AzureEnvironment <Cloud Type for example AzureCloud> #Example New-MicrosoftAssessmentsApplication -AzureEnvironment AzureCloud
Note
This script runs and then prompts you for Global Administrator Credentials.
Cloud Type
Value | Description |
---|---|
AzureCloud | General Azure |
AzureChinaCloud | Azure China |
AzureGermanCloud | Azure German |
AzureUSGovernment | Azure US Government |
Note
If the value is "AzureCloud", you can omit the parameter.*
New-MicrosoftAssessmentsApplication
At the credential prompt, please enter an account with Global Administrator access rights.
You will be prompted to Sign-in again, please provide Global Administrator Credentials
Note
If using MFA you will be prompted to respond to the MFA request, for example, "Enter code". During the setup process you may receive multiple Sign-In prompts, this is expected whether using MFA or a Non-MFA enabled account. Please follow the On-Screen instructions to complete the setup.
Select Accept on "Permissions requested Accept for your organization". Permission requirement for each Cloud Assessment
Once permission has been accepted. You will be signed on into the Azure Portal.
On the Azure portal, Select [Microsoft Entra Directory] > [App Registrations] and confirm the “Microsoft Assessments” app is present on the right pane.
Select the Microsoft Assessment Application to open it, then select “View API Permissions”
Confirm the SharePoint App Permissions section was also configured.
Troubleshooting
For help with common issues regarding set up, see General Troubleshooting OnDemand Assessment Guide.