DumbMonit
Monitor Microsoft 365 with DumbMonit
Microsoft 365 service health, active incidents, license usage and risky users, read through Microsoft Graph.
DocumentationOfficial website: Microsoft 365
Product descriptions are in English, as in the product. The page labels follow your language.
What DumbMonit watches
Microsoft 365 through Microsoft Graph: services that are degraded or interrupted, active incidents and advisories, licenses about to run out, and users flagged at risk. DumbMonit signs in as an Entra application (client credentials flow): it exchanges the application's client ID and secret for a one-hour token at login.microsoftonline.com, keeps it until it expires, and reads graph.microsoft.com once a minute. Every call is a read; the application only holds read permissions.
Typical use. Service health, incidents, licenses, risky users
Examples
- Contoso Microsoft 365
How it connects
What you need
- Entra application (client credentials)The application (client) ID and a client secret of an Entra app registration with read-only Graph application permissions.
Network ports to open
443/TCPMicrosoft Graph API (HTTPS, graph.microsoft.com)443/TCPMicrosoft sign-in, token request (HTTPS, login.microsoftonline.com)
Setup steps: Create a read-only Entra application for DumbMonit
In the Microsoft Entra admin center (entra.microsoft.com), open Entra ID → App registrations → New registration, name it DumbMonit, keep a single tenant and register it.
On the Overview page, copy the Application (client) ID and the Directory (tenant) ID.
Open API permissions → Add a permission → Microsoft Graph → Application permissions, add the permissions listed below, then click Grant admin consent.
Open Certificates & secrets → New client secret and copy its Value (not the Secret ID): it is shown once and it expires, so note the date.
In DumbMonit, enter graph.microsoft.com as address, paste the client ID and the secret value, and fill in the Tenant ID option.
Heads-up. Admin consent gives the application tenant-wide read access to the data above. Use a dedicated app registration with only these permissions, and renew its client secret before it expires.