Required Microsoft licenses for Office 365

In order for RocketCyber to monitor Office 365, the Microsoft admin account you use to link RocketCyber to Microsoft must have the following licenses/privileges:

  • The account must have global admin rights.
  • The account must have the Entra ID Security Reader Role. Refer to Adding the Security Reader role in Entra ID.
  • The account must have an Entra ID P1 or P2 License Assigned (see details below).
  • At least one P1 or P2 license per tenant is required for the RocketCyber product to function; please consult your license with Microsoft and Microsoft requirements to determine the appropriate number of P1 or P2 licenses required for your organization.

You can check if the account has an Entra ID P1 or P2 License assigned by logging in to your Microsoft Admin Portal, Navigating to Users (and selecting the user) and looking at the Licenses and App tab as shown below:

mceclip0.png

If you do not own an Entra ID P1 or P2 license, refer to How To Add Entra ID Premium P1 or P2 to learn how to acquire the license from Microsoft.

NOTE  An Entra ID P2 License is preferred for the Risk Detection app. If you apply a P1 license the following fields will be presented as "hidden" in the Risk Detection data:

  • riskLevel
  • riskDetail
  • description

NOTE  GCC High, GCC, and DOD are not supported versions of Microsoft 365 for integration.