Share via

Getting started using the Microsoft Assessment Microsoft Entra Application

Connectivity Requirements

Office 365 requires connectivity to the internet. The endpoints listed here should be reachable.

The setup of the Microsoft Assessment Microsoft Entra Application requires access to the following endpoints:

aadcdn.msauth.net:443
az818661.vo.msecnd.net:443
c.urs.microsoft.com:443
go.microsoft.com:443
iecvlist.com:443
ieonline.microsoft.com:443
login.microsoftonline.com:443
oneget.org:443
ongetcdn.azureedge.net:443
psg-prod-eastus.azureedge.net:443
www.powershellgallery.com:443

Setting up the Microsoft Entra Application

  1. Open the Windows PowerShell command prompt with [Run as Administrator] on the Data Collection Machine.

  2. Run the following command.

    New-MicrosoftAssessmentsApplication -AzureEnvironment <Cloud Type for example AzureCloud>

#Example
New-MicrosoftAssessmentsApplication -AzureEnvironment AzureCloud

    Note

    This script runs and then prompts you for Global Administrator Credentials.

Cloud Type

Value Description
AzureCloud General Azure
AzureChinaCloud Azure China
AzureGermanCloud Azure German
AzureUSGovernment Azure US Government

Note

If the value is "AzureCloud", you can omit the parameter.*

New-MicrosoftAssessmentsApplication

Permission requirement for each Cloud Assessment

  1. At the credential prompt, please enter an account with Global Administrator access rights.

  2. You will be prompted to Sign-in again, please provide Global Administrator Credentials

Note

If using MFA you will be prompted to respond to the MFA request, for example, "Enter code". During the setup process you may receive multiple Sign-In prompts, this is expected whether using MFA or a Non-MFA enabled account. Please follow the On-Screen instructions to complete the setup.

  1. Select Accept on "Permissions requested Accept for your organization". Permission requirement for each Cloud Assessment

  2. Once permission has been accepted. You will be signed on into the Azure Portal.

  3. On the Azure portal, Select [Microsoft Entra Directory] > [App Registrations] and confirm the “Microsoft Assessments” app is present on the right pane.

  4. Select the Microsoft Assessment Application to open it, then select “View API Permissions”

  5. Confirm the SharePoint App Permissions section was also configured.

Troubleshooting

For help with common issues regarding set up, see General Troubleshooting OnDemand Assessment Guide.