Azure tenant scan tasks scan tasks support scanning a Microsoft Azure tenant.



Windows Firewall Requirements


The Azure tenant agent must be able to connect to Microsoft Azure REST API using HTTPS.



Access Settings


The Azure tenant agent must have the following permissions in Entra directory.

    • Directory.Read.All
    • Organization.Read.All


The Azure tenant agent must have Reader rights in the Microsoft Azure tenant.



Optional Access Settings


The Azure tenant agent has several optional components that may require optional additional permissions.



Local Service


Azure tenant scan tasks scan tasks do not support the XIA Configuration Local Service.