Microsoft Office 365
Users, mailbox security, licenses, MFA
Microsoft Entra ID
Identity, conditional access, sign-in logs
Microsoft Teams
Team membership, guest access, channels
Microsoft Intune
Device compliance, encryption, security
Dynamics 365 Sales
CRM user access and role monitoring
Microsoft Office 365
Connect Microsoft Office 365 to monitor user accounts, mailbox security, MFA enrollment, and license assignments.Prerequisites
How to Connect
Authorize
You will be redirected to the Microsoft login page. Sign in with your admin credentials and click Accept to grant read-only permissions.
What’s Collected
User accounts, MFA status, license assignments, mailbox forwarding rules, groups, and audit logs.Microsoft Entra ID
Connect Microsoft Entra ID (formerly Azure AD) to sync your user directory for managing onboarding and offboarding status.Prerequisites
How to Find Your Tenant ID
Sign in to Azure
Go to the Azure Portal and sign in with your admin account.
Open Microsoft Entra ID
Under Azure Services, select Microsoft Entra ID (or search for it in the top search bar).
How to Connect
Authorize with OAuth
You will be redirected to Microsoft. Sign in and grant consent for read-only directory access.
What’s Collected
Users, groups, MFA enrollment, conditional access policies, sign-in logs, and administrative role assignments.Microsoft Teams
Connect Microsoft Teams to monitor team membership, guest access, and communication security settings.Prerequisites
How to Connect
What’s Collected
Teams, channels, team members, guest users, and team settings.Microsoft Intune
Connect Microsoft Intune to monitor device compliance, encryption status, and security configurations across managed Windows, macOS, iOS, and Android devices.Prerequisites
How to Connect
Authorize
You will be redirected to Microsoft. Sign in with your admin credentials and grant the necessary permissions for device security data.
What’s Collected
Managed devices, compliance status, encryption (BitLocker/FileVault) status, OS version, and device configuration profiles.Microsoft Dynamics 365 Sales
Connect Microsoft Dynamics 365 Sales to monitor CRM user access, roles, and security configurations.Prerequisites
How to Connect
What’s Collected
CRM users, role assignments, and access control configurations.Compliance Mapping
All Microsoft integrations contribute to the following framework controls:| Framework | Controls | Coverage |
|---|---|---|
| SOC 2 | CC6.1, CC6.2, CC6.3, CC6.6 | User access, authentication, and device security |
| ISO 27001 | A.5.15–A.5.18, A.8.1, A.8.2 | Access control, asset management |
| HIPAA | 164.312(a), 164.312(d) | Access controls and authentication |
| GDPR | Art. 5(1)(f), Art. 32 | Security of processing |
FAQ
Do I need separate connections for each Microsoft product?
Do I need separate connections for each Microsoft product?
Yes. Each integration has its own OAuth consent and API permissions. Microsoft Office 365 covers productivity, Entra ID covers identity, Teams covers collaboration, Intune covers devices, and Dynamics 365 covers CRM.
Does LowerPlane modify anything in my Microsoft tenant?
Does LowerPlane modify anything in my Microsoft tenant?
No. All integrations use read-only API permissions. LowerPlane cannot create, modify, or delete any data in your Microsoft environment.
Which Azure AD plan do I need?
Which Azure AD plan do I need?
Basic user and MFA data works with any Microsoft Office 365 plan. Advanced features (conditional access policies, detailed sign-in logs) require Azure AD Premium P1 or P2.