All integrations
Connect Azure to Polara
An app registration in your own tenant with read permissions and the Reader role. Pulls users, groups, conditional access, role assignments, sign-in and audit logs, and storage encryption.
What you connect
Credential. An app registration in your tenant, read permissions only.
- Directory (tenant) ID
- On the app's Overview page.
- Application (client) ID
- On the same Overview page.
- Client secret
- The secret's Value, shown once when you create it. Not the Secret ID.
Where to find it
The connect dialog in your dashboard shows these steps next to the fields.
- In the Microsoft Entra admin center, open App registrations and create a new registration.
- Under API permissions, add Directory.Read.All, AuditLog.Read.All and Policy.Read.All as Microsoft Graph application permissions, then grant admin consent.
- In the Azure portal, give the app the Reader role on each subscription you want collected.
- Under Certificates and secrets, create a client secret and paste it here.
Read-only. Graph permissions are read permissions, and Reader can view resources but not change them.
What Polara collects
8 evidence itemsEach item lists the System and Organization Controls 2 (SOC 2) criteria it carries and the control it supports.
| Evidence | What it shows | Controls it satisfies |
|---|---|---|
| Directory users | Directory users with their enabled status and user type. | Controls it satisfies: CC6.2, CC6.3, CC1.5Directory user list for access reviews |
| Directory groups | Security and Microsoft 365 groups in the directory. | Controls it satisfies: CC6.1, CC6.2, CC6.3Role-based access to production |
| Conditional access policies | Conditional access policies, with the count of enabled policies that require multi-factor authentication. | Controls it satisfies: CC6.1, CC6.6Conditional access policies that require multi-factor authentication |
| Directory role assignments | Directory role assignments, including how many users hold Global Administrator. | Controls it satisfies: CC6.3Named privileged admins |
| Sign-in logs | A summary of sign-ins over a rolling 30-day window, on tenants licensed for sign-in logs. | Controls it satisfies: CC4.1, CC4.2, CC7.2Centralized log collection |
| Directory audit logs | A summary of directory audit events over a rolling 30-day window. | Controls it satisfies: CC4.1, CC7.2Directory admin activity logged |
| Storage account encryption | Encryption at rest settings for the storage accounts in every subscription Polara can read. | Controls it satisfies: CC6.1Encryption at rest for databases and backups |
| Resource role assignments | Azure Resource Manager role assignments in every subscription Polara can read. | Controls it satisfies: CC6.1, CC6.2, CC6.3Role-based access to production |
Connect Azure from your dashboard.
Create an account, open Integrations, and paste the app credentials.
Take the free assessmentAlready a customer? Open Integrations