DumbMonit
Monitorizar Microsoft 365 con DumbMonit
Microsoft 365 service health, active incidents, license usage and risky users, read through Microsoft Graph.
DocumentaciónSitio web oficial: Microsoft 365
Las descripciones están en inglés, como en el producto. Las etiquetas de la página siguen su idioma.
Qué vigila DumbMonit
Microsoft 365 through Microsoft Graph: services that are degraded or interrupted, active incidents and advisories, licenses about to run out, and users flagged at risk. DumbMonit signs in as an Entra application (client credentials flow): it exchanges the application's client ID and secret for a one-hour token at login.microsoftonline.com, keeps it until it expires, and reads graph.microsoft.com once a minute. Every call is a read; the application only holds read permissions.
Uso habitual. Service health, incidents, licenses, risky users
Ejemplos
- Contoso Microsoft 365
Cómo se conecta
Qué necesita
- Entra application (client credentials)The application (client) ID and a client secret of an Entra app registration with read-only Graph application permissions.
Puertos de red que abrir
443/TCPMicrosoft Graph API (HTTPS, graph.microsoft.com)443/TCPMicrosoft sign-in, token request (HTTPS, login.microsoftonline.com)
Pasos de configuración: Create a read-only Entra application for DumbMonit
In the Microsoft Entra admin center (entra.microsoft.com), open Entra ID → App registrations → New registration, name it DumbMonit, keep a single tenant and register it.
On the Overview page, copy the Application (client) ID and the Directory (tenant) ID.
Open API permissions → Add a permission → Microsoft Graph → Application permissions, add the permissions listed below, then click Grant admin consent.
Open Certificates & secrets → New client secret and copy its Value (not the Secret ID): it is shown once and it expires, so note the date.
In DumbMonit, enter graph.microsoft.com as address, paste the client ID and the secret value, and fill in the Tenant ID option.
Ojo. Admin consent gives the application tenant-wide read access to the data above. Use a dedicated app registration with only these permissions, and renew its client secret before it expires.