This page explains how to add an Entra ID tenant to Redgate Monitor.

Before you start: You need Cloud Service Credentials (an Azure app registration) with the permissions listed in step 4. If you don’t have any yet, see Creating access key for Microsoft Azure first.

1. Go to the Configuration page and, under Estate, select Monitored Identity and Access Management (IAM).
2. Click + Add an IAM. The Add Monitored IAM panel expands:
3. Enter a Name for the monitored IAM. Use this to distinguish between multiple Entra ID tenants.
4. Select the appropriate Cloud Service Credentials for your authentication method. If you haven’t created any yet, see Managing cloud services. The credentials need at least these permissions to collect user and group data from Entra ID:
   
   1. User.Read.All
   2. Group.Read.All
5. Select the appropriate Service Principal credentials. You can then add the Entra ID tenant directly, or click Test to verify that the registered application has the required permissions.
   The test result indicates whether the credentials are valid:
   1. Invalid credentials:
      
   2. Valid credentials:
      

After a connection is established and a data collection event completes successfully, the monitored IAM status is displayed as Monitoring permissions. If Redgate Monitor encounters a problem and displays a different status, see Monitoring status explained.