Microsoft 365
Work & Comms
Connect with a service principal and evidence Microsoft 365 controls.
Microsoft 365 checks in Varman
Read-only monitoring of identity security, MFA enforcement, admin access, and audit logging in Microsoft 365 (Office 365) via Microsoft Graph. Varman runs 4 checks against Microsoft 365 on a schedule and records each result as evidence.
MFA Enforced
high severityVerify that multi-factor authentication is enforced for the Microsoft 365 tenant via Security Defaults or a Conditional Access policy
Admin Accounts Limited
medium severityVerify that the number of Global Administrators is limited and follows least-privilege guidance
Inactive Users Disabled
medium severityFlag enabled accounts that have not signed in within the inactivity threshold so stale accounts can be disabled
Audit Logging Enabled
medium severityVerify that Microsoft Entra directory audit logs are available and accessible
Connecting Microsoft 365
Connect Microsoft 365 with a read-only Entra app (application permissions). An admin adds the details below in Varman under Integrations. Secret values are encrypted before they are stored.
- Directory (tenant) ID
- The tenant ID of your Entra app registration.
- Application (client) ID
- Client secret
- A client secret Value from the app registration.