Microsoft Defender for Cloud Apps

Connection Requirements

1 - Tenant Portal Domain

Your Defender for Cloud Apps tenant URL, without the protocol. Format: <tenant>.<region>.portal.cloudappsecurity.com (for example mytenant.eu2.portal.cloudappsecurity.com). You can find it in the Microsoft Defender Portal under Settings → Cloud Apps → System → About.

2 - API Token

Generate a token in the Microsoft Defender Portal under Settings → Cloud Apps → System → API tokens. Click Add token, give it a name, and copy the generated token value. The token inherits the permissions of the user that created it.

3 - Proxy

Proxy URL (optional).

Default Values

• timeout: 30 seconds

Permissions Required

The API token must be generated by a user with at least the Security Reader role in Microsoft Defender for Cloud Apps (Global Admin or Security Admin also work). Read-only access is sufficient for user data collection.

Product Variant

This connector uses the Entities API, which is not available in the Microsoft 365 Cloud App Security variant. A full Microsoft Defender for Cloud Apps tenant is required.