diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/microsoft-azure-ad-inventory-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/microsoft-azure-ad-inventory-source.md index 61801d7f65..ecf29c4593 100644 --- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/microsoft-azure-ad-inventory-source.md +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/microsoft-azure-ad-inventory-source.md @@ -92,6 +92,10 @@ To configure a Microsoft Azure AD Inventory Source: :::note To collect the `signInActivity` information you should have `Azure AD Premium P1/P2` license. ::: +1. **Collect Users Group Details**. By enabling the checkbox, you can also include the user group information in your user response. [Learn more](https://learn.microsoft.com/en-us/graph/api/directoryobject-getmembergroups?view=graph-rest-1.0&tabs=http#http-request). + :::note + To know about the permissions required to collect user group details, refer to the [Microsoft documentation](https://learn.microsoft.com/en-us/graph/api/group-get?view=graph-rest-1.0&tabs=http#permissions). + ::: 1. **Processing Rules for Logs**. Configure any desired filters, such as allowlist, denylist, hash, or mask, as described in [Create a Processing Rule](/docs/send-data/collection/processing-rules/create-processing-rule). 1. When you are finished configuring the Source, click **Submit**. @@ -126,6 +130,7 @@ Sources can be configured using UTF-8 encoded JSON files with the Collector Ma | application_id | String | Yes | `null` | Provide the Application (client) ID you got after you registered (created) the Azure Application. | | | supported_apis | Array of strings | Yes | `null` | Define one or more of the available APIs to collect: Devices, and Users.| ["Devices","Users"] | | userSignInActivity | Boolean | No | False | Select the checkbox to include the sign in activity information in your user response. | | +| userGroupDetails | Boolean | No | False | Select the checkbox to include the user’s group details in your user response. | | ### JSON example diff --git a/static/files/c2c/microsoft-azure-ad-inventory/example.json b/static/files/c2c/microsoft-azure-ad-inventory/example.json index 7d60db9e05..e78878ad02 100644 --- a/static/files/c2c/microsoft-azure-ad-inventory/example.json +++ b/static/files/c2c/microsoft-azure-ad-inventory/example.json @@ -11,10 +11,11 @@ "secret_key": "********", "application_id": "ApplicationID", "userSignInActivity": false, + "userGroupDetails": false, "fields": { "_siemForward": false } }, "sourceType": "Universal" } -} \ No newline at end of file +} diff --git a/static/files/c2c/microsoft-azure-ad-inventory/example.tf b/static/files/c2c/microsoft-azure-ad-inventory/example.tf index c40232235a..7c9bc3f1d6 100644 --- a/static/files/c2c/microsoft-azure-ad-inventory/example.tf +++ b/static/files/c2c/microsoft-azure-ad-inventory/example.tf @@ -10,6 +10,7 @@ resource "sumologic_cloud_to_cloud_source" "microsoft-azure-ad-inventory-source" "secret_key": "********", "application_id": "ApplicationID", "userSignInActivity": false, + "userGroupDetails": false, "fields": { "_siemForward": false }