Get started with app governance (Microsoft)

0
(0)

Sign up for app governance

To get started using the app governance add-on to Defender for Cloud Apps, start by verifying the prerequisites for admin role, licensing, and regional requirements.

For existing Defender for Cloud Apps customers, you can navigate to the sign up page for the free trial and complete the steps to add app governance to your tenant.

If you aren’t already a Defender for Cloud Apps customer, you can sign up for a free trial by navigating to the sign up page for the free trial and complete the steps for sign-up. Then, navigate to the sign up page for the free trial for app governance and complete the steps to add a free trial of app governance to your tenant.

The final step is adding integration with Defender for Cloud Apps:

Prerequisites:

  • Office 365 is connected in Defender for Cloud Apps
  • Office 365 Azure AD apps are enabled

To enable app governance sync with Defender for Cloud Apps, follow these steps:

  1. Go to your Defender for Cloud Apps portal – https://portal.cloudappsecurity.com
  2. Select the gear icon (top-right corner) and select Settings.
  3. Under Threat Protection, select App Governance.
  4. Select Enable App Governance integration, and then select Save.

To verify the integration with Defender for Cloud Apps is active, look for the app governance policies listed below to appear in Defender for Cloud Apps. The new policies might take few minutes to appear once integration is enabled.

  • Microsoft 365 OAuth app Reputation
  • Microsoft 365 OAuth Phishing Detection
  • Microsoft 365 OAuth App Governance

 Note

App governance alerts will not flow to Microsoft 365 Defender until app governance is enabled in Defender for Cloud Apps and you have provisioned both Defender for Cloud Apps and Microsoft 365 Defender by accessing their respective portals at least once.

To purchase a subscription of app governance, reach out to your sales account team.

Prerequisites

  1. Verify your account has the appropriate level of licensing. App governance is an add-on feature for Defender for Cloud Apps, and so Defender for Cloud Apps must be present in your account as either a standalone product or as part of the various license packages.
  2. You must have one of the administrator roles listed below to access the app governance pages in the portal.
  3. Your organization’s billing address must be in a WW region or in GBR, CAN, JPN, or AUS go-local region to activate the free trial.

Licensing for app governance

Before you get started with app governance, you should confirm your Microsoft 365 admin center – subscriptions and any add-ons. App governance is available as an add-on to organizations with:

  • Microsoft Defender for Cloud Apps (standalone)
  • Enterprise Mobility + Security E5/A5
  • Microsoft 365 E5/A5
  • Microsoft 365 E5/A5 Security
  • Microsoft 365 E5/A5 Compliance
  • Microsoft 365 E5/A5 Information Protection and Governance
  • Microsoft 365 F5 Security add-on
  • Microsoft 365 F5 Compliance add-on
  • Microsoft 365 F5 Security + Compliance add-on

Administrator roles

 Note

Only Global Admin, Company Admin, or Billing Admin role can activate the app governance free trial.

One of the following administrator roles is required to see app governance pages or manage policies and settings:

  • Application Administrator
  • Cloud Application Administrator
  • Company or Global Administrator
  • Compliance Administrator
  • Compliance Data Administrator
  • Global Reader
  • Security Administrator
  • Security Operator
  • Security Reader (read-only)

Here are the capabilities for each role.

Role Read the dashboard Read all apps Read policies Create, update, or delete policies Read alerts Update alerts Read settings Update settings Read Remediation Update Remediation
Application Administrator Check mark. Check mark. Check mark. Check mark Check mark Check mark Check mark Check mark Check mark Check mark
Cloud Application Administrator Check mark
Company or Global Administrator Check mark. Check mark. Check mark Check mark Check mark Check mark Check mark Check mark Check mark Check mark
Compliance Administrator Check mark. Check mark Check mark Check mark Check mark Check mark Check mark Check mark
Compliance Data Administrator Check mark. Check mark Check mark Check mark Check mark Check mark Check mark Check mark
Global Reader Check mark. Check mark Check mark Check mark Check mark
Security Administrator Check mark. Check mark Check mark Check mark Check mark Check mark Check mark Check mark
Security Operator Check mark. Check mark Check mark Check mark Check mark Check mark Check mark Check mark Check mark
Security Reader Check mark. Check mark Check mark Check mark Check mark Check mark

For more information about each role, see Administrator role permissions.

Canceling your trial

If you would like to cancel your trial of app governance, you can communicate with your CXE contact, or use these steps:

  1. In the Microsoft 365 admin center, go to Billing > Your products.
  2. Navigate to the app governance trial, select the three dots, and select Cancel subscription.
  3. In the resulting fly-out pane, provide a reason for cancellation, any additional feedback, and select Cancel subscription.
  4. Select Cancel subscription in the resulting pop-up screen. Your trial is canceled, you’ll lose access to app governance, and your app governance data will be deleted (log data that is used to create the app governance insights and detections – no emails or other files will be affected).

Source : Official Microsoft Brand
Editor by : BEST Antivirus KBS Team

How useful was this post?

Click on a star to rate it!

Average rating 0 / 5. Vote count: 0

No votes so far! Be the first to rate this post.

(Visited 4 times, 1 visits today)
Tagged: