Enterprise Reporter 3.2.2 - Configuration Manager User Guide

Step 2b: Choose scopes for your Office 365 discoveries

In this section, we will explore choosing scopes for each discovery type.

See also Step 2a. Choose scopes for your discoveries

NOTE: Azure Active Directory, Azure Resource, and OneDrive discoveries are multi-threaded to optimize performance and require an Intel® or AMD 2 GHz multiprocessor with at least 2 cores.

Choosing Your Azure Active Directory Scopes

Azure Active Directory discoveries, by default, target the tenant that you specified with the credentials on the Name page in Step 1. Create the Discovery . You can edit the name of the Azure Active Directory tenant if it is different from the credentials specified. Information about your contacts, users, groups, group members, roles, and application service principals is collected based on the discovery options.

See also:

Azure AD Discovery: Configuring Enterprise Reporter Applications for Azure

You must register the applications used by Enterprise Reporter in your Azure environment. You can complete this process using the System | Configuration | Tenant Application Management option in the main menu before you create discoveries.

If the Enterprise Reporter Azure application has not yet been registered in your Azure environment, the Azure Active Directory Scopes page of the discovery will display a warning message above the Azure Tenant name at the top of the screen. If you have already configured the required tenant application and it indicates the option to Reconfigure, nothing further is necessary.

IMPORTANT: If changes are made to Azure applications outside of Enterprise Reporter (for example, the removal of permissions or the deletion of applications), Enterprise Reporter will not receive these updates. Please use the Reconfigure link next to an application to re-create the application and consent to application permissions again. For more information, see To reconfigure application for a tenant .

NOTE: For more information, see Permissions for Enterprise Reporter Tenant Applications .

NOTE: For more information, see Permissions for Enterprise Reporter Tenant Applications .

Azure AD Discovery: Decide what to collect from the tenant in the discovery

You can collect a variety of information from the Office 365 tenant in your discovery. Basic information from the tenant (the tenant name and full LDAP path), subscriptions, licenses, and service plans is always collected.

The following table outlines the additional information that can be collected. Collecting additional information impacts discovery performance. Options with a high performance cost will slow discovery performance more than options with a medium or low performance cost.

NOTE: Office 365 discoveries support both Multi-Factor Authentication enabled and disabled credentials. However, using Multi-Factor Authentication enabled credentials on Office 365 discoveries may result in an incomplete collection that omits one or more objects and attributes. For more information, see Multi-Factor Authentication Discovery Credential Limitations .