DumbMonit
Surveiller Microsoft 365 avec DumbMonit
Microsoft 365 service health, active incidents, license usage and risky users, read through Microsoft Graph.
DocumentationSite officiel : Microsoft 365
Les descriptions des produits sont en anglais, comme dans le produit. Les libellés de la page suivent votre langue.
Ce que DumbMonit surveille
Microsoft 365 through Microsoft Graph: services that are degraded or interrupted, active incidents and advisories, licenses about to run out, and users flagged at risk. DumbMonit signs in as an Entra application (client credentials flow): it exchanges the application's client ID and secret for a one-hour token at login.microsoftonline.com, keeps it until it expires, and reads graph.microsoft.com once a minute. Every call is a read; the application only holds read permissions.
Usage typique. Service health, incidents, licenses, risky users
Exemples
- Contoso Microsoft 365
Comment il se connecte
Ce qu'il faut
- Entra application (client credentials)The application (client) ID and a client secret of an Entra app registration with read-only Graph application permissions.
Ports réseau à ouvrir
443/TCPMicrosoft Graph API (HTTPS, graph.microsoft.com)443/TCPMicrosoft sign-in, token request (HTTPS, login.microsoftonline.com)
Étapes de mise en place: Create a read-only Entra application for DumbMonit
In the Microsoft Entra admin center (entra.microsoft.com), open Entra ID → App registrations → New registration, name it DumbMonit, keep a single tenant and register it.
On the Overview page, copy the Application (client) ID and the Directory (tenant) ID.
Open API permissions → Add a permission → Microsoft Graph → Application permissions, add the permissions listed below, then click Grant admin consent.
Open Certificates & secrets → New client secret and copy its Value (not the Secret ID): it is shown once and it expires, so note the date.
In DumbMonit, enter graph.microsoft.com as address, paste the client ID and the secret value, and fill in the Tenant ID option.
À savoir. Admin consent gives the application tenant-wide read access to the data above. Use a dedicated app registration with only these permissions, and renew its client secret before it expires.