> ## Documentation Index
> Fetch the complete documentation index at: https://docs.myrmex.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Entra

> Connect Microsoft Entra to Myrmex — review identities, roles, and access posture on demand.

import { Note, Steps, Step, CardGroup, Card } from '@mintlify/components';

Connect **Microsoft Entra** (Azure AD) so Myrmex can review your identities, groups, roles, and conditional-access posture across your tenant. Myrmex connects from the cloud over **Microsoft Graph** after you grant admin consent — reading in real time, on demand, with **no Collector required** and nothing stored on the Myrmex side.

## What Myrmex Can Do

<CardGroup cols={2}>
  <Card title="Identity inventory" icon="users">
    Review users, groups, and directory roles across your tenant.
  </Card>

  <Card title="Access posture" icon="shield-halved">
    Audit conditional access, MFA coverage, and privileged role assignments.
  </Card>

  <Card title="Least-privilege review" icon="user-shield">
    Spot over-privileged, stale, or risky accounts and role assignments.
  </Card>

  <Card title="Investigate" icon="magnifying-glass">
    Ask about your directory and access settings directly in the Workspace.
  </Card>
</CardGroup>

## Before You Start

Microsoft Entra connects from the cloud — **no Collector is required**. You'll need:

* A **Microsoft Entra tenant** and your **Tenant ID** (Directory ID).
* An account with the **Global Administrator** (or **Privileged Role Administrator**) role, to grant tenant-wide admin consent.

## Step 1 — Create the Credential in Microsoft Entra

<Steps>
  <Step title="Find your Tenant ID">
    In the **Microsoft Entra admin center**, open **Overview** and copy the **Tenant ID** (Directory ID).
  </Step>

  <Step title="Confirm your role">
    Make sure you can grant tenant-wide admin consent — you need the **Global Administrator** or **Privileged Role Administrator** role.
  </Step>

  <Step title="Grant consent during Connect">
    Myrmex uses a pre-registered application. When you add the integration you'll be redirected to Microsoft to review and grant the requested read permissions.
  </Step>
</Steps>

## Step 2 — Add the Integration in Myrmex

From the **Directory**, choose **Add Integration → Microsoft Entra**, then fill in:

| Field         | Description                                 |
| ------------- | ------------------------------------------- |
| **Tenant ID** | Your Microsoft Entra directory (tenant) ID. |

<Note>
  When you connect, you're redirected to Microsoft to sign in and grant admin consent. The authentication method and the set of granted permissions are captured automatically during consent — you don't enter them by hand.
</Note>

## Connect

Click **Connect** and complete the Microsoft admin-consent prompt. Microsoft Entra then appears under **Environment → Integrations**, and you can start asking the AI about it in the Workspace.

<Note>
  Myrmex requests read-only Microsoft Graph permissions for analysis. Consent can be revoked at any time from the Microsoft Entra admin center.
</Note>