DumbMonit
Monitorare Microsoft 365 con DumbMonit
Microsoft 365 service health, active incidents, license usage and risky users, read through Microsoft Graph.
DocumentazioneSito ufficiale: Microsoft 365
Le descrizioni sono in inglese, come nel prodotto. Le etichette della pagina seguono la tua lingua.
Cosa controlla DumbMonit
Microsoft 365 through Microsoft Graph: services that are degraded or interrupted, active incidents and advisories, licenses about to run out, and users flagged at risk. DumbMonit signs in as an Entra application (client credentials flow): it exchanges the application's client ID and secret for a one-hour token at login.microsoftonline.com, keeps it until it expires, and reads graph.microsoft.com once a minute. Every call is a read; the application only holds read permissions.
Uso tipico. Service health, incidents, licenses, risky users
Esempi
- Contoso Microsoft 365
Come si collega
Cosa serve
- Entra application (client credentials)The application (client) ID and a client secret of an Entra app registration with read-only Graph application permissions.
Porte di rete da aprire
443/TCPMicrosoft Graph API (HTTPS, graph.microsoft.com)443/TCPMicrosoft sign-in, token request (HTTPS, login.microsoftonline.com)
Passaggi di configurazione: Create a read-only Entra application for DumbMonit
In the Microsoft Entra admin center (entra.microsoft.com), open Entra ID → App registrations → New registration, name it DumbMonit, keep a single tenant and register it.
On the Overview page, copy the Application (client) ID and the Directory (tenant) ID.
Open API permissions → Add a permission → Microsoft Graph → Application permissions, add the permissions listed below, then click Grant admin consent.
Open Certificates & secrets → New client secret and copy its Value (not the Secret ID): it is shown once and it expires, so note the date.
In DumbMonit, enter graph.microsoft.com as address, paste the client ID and the secret value, and fill in the Tenant ID option.
Attenzione. Admin consent gives the application tenant-wide read access to the data above. Use a dedicated app registration with only these permissions, and renew its client secret before it expires.