Built for Microsoft Azure

TENET Setup Wizard (Recommended)

The fastest way to connect TENET to your Azure environment is with the TENET Setup Wizard. It guides you through the entire process automatically — creating the app registration, configuring API permissions, and assigning the required roles — in just a few clicks. Watch the video below to see how it works.

Manual Setup

Follow these steps to manually configure the Azure app registration and permissions required by TENET.

Step 1: Creating an app registration in the Azure Portal

2. Search for App Registrations in the top search bar.

3. Click on + New registration

4. Fill in the details:

• Name: TENET
• Redirect URI: Select a platform: Single-page application (SPA)
• URL: https://tenet-portal.com
• Click Register

Step 2: Configure API Permissions

5. In the top toolbar, search for TENET (or the name you used for the app registration)

6. Navigate to Manage → API permissions

7. Select + Add a permission → Microsoft Graph → Application permissions.

Ensure you select Application Permissions, not Delegated — this is required for the integration to work correctly.

8. Search for and select Directory.Read.All (Enables TENET to read directory data for synchronization)

• Click add permissions

9. Grant admin consent

• Then click on Grant admin consent for [Your Tenant] and confirm selection

10. Ensure all permissions have a green check in the Status column.

Step 3: Grant the TENET application Subscription Permissions

11. In the top toolbar, search for Management Groups

12. Select your root management group (usually Tenant Root Group).

Global Administrator but can't access Management Groups? Follow Microsoft's guide to elevate your access.

13. Click on Access control (IAM) → Role assignments

14. Select Reader role.

Repeat this step twice more to also assign Monitoring Reader and Security Reader — all three roles are required.

• Click on the Members tab, and then + Select members.

• In the + Select Members panel, search for the name of the app registration that you created earlier, then click on it
• Click Select at the bottom

All three roles (Reader, Monitoring Reader, Security Reader) are required. If not using management groups, ensure each role is assigned per individual subscription.

15. Once all permissions have been added, click Review + assign (twice) to complete

Step 4: Create Client Secret

16. Return to App registrations and open your registered app

Please take note of the Application (client) ID and Directory (tenant) ID from this page - you will need to copy these across to the TENET Platform later.

17. Navigate to Manage → Certificates & secrets → Client secrets

18. Click + New client secret, provide a name and expiry, and then click Add

19. Please take note of the Value of the secret - this is the final data point you will need to copy across to the TENET Platform.

Step 5: Add Credentials to TENET

20. Log in to TENET and navigate to Settings (tenet-portal.com/settings)

Enter a friendly Tenant Name and previously noted Tenant ID, Client ID & Client Secret then click on Start Assessment

Wait for validation and initial data fetch to be completed (about 45 seconds) and you can start reviewing TENET's insights.

You're done! 🎉