---
title: Microsoft Graph API Permissions for Monitoring Azure
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Integrations > Integration Guides > Microsoft Graph API Permissions for
  Monitoring Azure
---

# Microsoft Graph API Permissions for Monitoring Azure

To fetch Azure app registration details, the [Datadog-Azure integration](https://docs.datadoghq.com/integrations/azure.md) requires access to the [Microsoft Graph API](https://learn.microsoft.com/en-us/graph/permissions-reference), which is queried at the tenant level.

**Note**: On the Azure integration tile in Datadog, if there are several app registrations (client IDs) used for the same tenant, you only need permissions on one app registration.

## Setup{% #setup %}

1. In your Azure portal, go to the **App registrations** page. Click on the app registration you want to modify.

1. In the left sidebar, under the *Manage* section, click on **API permissions**.

1. Click **+ Add a permission**.

1. In the panel that opens, select **Microsoft Graph**.

1. On the next page, select **Application permissions**. Then, under *Select permissions*, search for and enable each of the following permissions.

   - `Application.Read.All`
   - `Directory.Read.All`
   - `Group.Read.All`
   - `Policy.Read.All`
   - `User.Read.All`

Click the checkbox on the left, and click the **Add permissions** button at the bottom to add each permission.

   {% image
      source="https://docs.dd-static.net/images/integrations/guide/azure-graph-api-permissions/permission-select-1.d575cb99394cdc80697796047c483037.png?auto=format&fit=max&w=850 1x, https://docs.dd-static.net/images/integrations/guide/azure-graph-api-permissions/permission-select-1.d575cb99394cdc80697796047c483037.png?auto=format&fit=max&w=850&dpr=2 2x"
      alt="Panel for adding Microsoft Graph API permissions. 'Application permissions' is selected. Under the 'Select permissions' section, a user has typed in 'Application.Read.All'. In the section below, under 'Application (1)', the Application.Read.All permission appears next to a selected checkbox." /%}

## Further Reading{% #further-reading %}

- [Datadog-Azure Integration](https://docs.datadoghq.com/integrations/azure.md)