Microsoft 365 Copilot

What it covers

AI governance: Global Admin hygiene, MFA Conditional Access, and audit logging via Microsoft Graph.

Credential to create

Microsoft Entra app registration (app-only Graph access)

Register an app

Permissions to grant

• RoleManagement.Read.Directory (Global Admin count)
• Policy.Read.All (conditional-access MFA policies)
• AuditLog.Read.All (directory audit logging)

Setup steps

1. Register an app in Microsoft Entra, add the three application permissions listed above, and grant admin consent.
2. Create a client secret on the app registration.
3. In Joopler, enter the Directory (tenant) ID and Application (client) ID and paste the client secret. Joopler mints and refreshes the Graph token itself.

Notes and gotchas

• The durable path is tenant id + client id + client secret. You can instead paste a one-off Graph token, but it expires in about an hour.
• Entra and Intune can reuse the same app registration.
• Admin consent URL: https://login.microsoftonline.com/{tenant}/adminconsent?client_id={clientId}