Zum Inhalt springen
PrismaraWissensdatenbank
Prismara-Plattform

Prismara SOCAnleitung

Connect your Microsoft tenant to Prismara SOC

  • Gilt für Administratoren
  • ⏱ 15 Min.

Dieser Inhalt ist noch nicht in deiner Sprache verfügbar.

Prismara SOC needs permission to read the security telemetry from your Microsoft tenant. You give that permission by granting admin consent in Microsoft Entra.

Before you begin

Section titled “Before you begin”
  • You need the Global administrator role in Prismara Admin.
  • You need a Microsoft Entra account that can grant tenant-wide admin consent, such as Global Administrator or Privileged Role Administrator.
  • Have your Microsoft Entra Tenant ID to hand. You can find it in the Microsoft Entra admin center under Overview. It looks like 00000000-0000-0000-0000-000000000000.
Section titled “Grant consent”

  1. Sign in with Admin sign-in at https://admin.prismara.eu/login.

  2. Select Prismara SOC > Microsoft tenants > Connect tenant.

  3. Enter your Tenant ID and a Display name, for example Contoso, then select Continue to Microsoft.

  4. Sign in to Microsoft with your Entra administrator account when prompted.

  5. Review the permissions Microsoft lists on the Permissions requested page. Prismara SOC asks only for read access to security data.

  6. Select Consent on behalf of your organization, then select Accept.

  7. Microsoft returns you to Prismara. The tenant shows the status Connected.

Verify data is flowing

Section titled “Verify data is flowing”

  1. In Prismara SOC > Microsoft tenants, select your tenant.

  2. Check the Data status panel. Each source, such as Microsoft Defender XDR and Microsoft Sentinel, shows Receiving data and a Last received time.

  3. If a source shows Waiting for first data, allow up to an hour after connecting, then refresh the page.

If a source does not start receiving data, see Troubleshoot Prismara SOC.

Section titled “Related articles”