Office 365 relies on Entra ID as directory service. Each Office 365 tenant corresponds to an Entra tenant where its user information is being stored.
This guide will cover the steps needed to grant your LibraCyber PhishBrain permissions on your Office 365 tenant. No changes are made to the Office 365 tenant itself by LibraCyber PhishBrain.
-
- Navigate to https://portal.azure.com/ and log in using your administrator credentials (NOT FROM https://aad.portal.azure.com/ )
- Open the App registrations portal as shown:
-
- Click on the New registration button
- Insert PhishBrain as the name of the application and choose Accounts in this organizational directory only as the supported account type.
-
- Take note of the Application ID shown in the top right corner:
-
- Click API Permissions and in the at the top of the screen select Add a permission
-
- Select Microsoft Graph API on the right side
- Under Application permissions, select:
- to get users details: user.read.all (or User.ReadBasic.All if you don't need telephone numbers)
- to filter users by group: Group.Read.All
- Click Add Permissions at the bottom of the page
- Click Grant admin consent for Your Company and click Yes in the dialog
-
-
Now select Certificates and Secrets:
- Add a new Client Secret, choose a description, choose a date from the Expiry options dropdown list With the latest update of Microsoft security policies it is no longer possible to generate a perpetual certificate.
-
- Click Add
- Now copy the newly generated key value you will need this for the next step.
WARNING: Be advised that you won’t be able to retrieve the key value at a later stage!
NOTE: If you get error "Authorization_RequestDenied: Insufficient privileges to complete the operation", make sure you created all permission, and that permission type is "Application" (not "Delegate", or other). Also remember that permission propagation will take some time on Microsoft server