Manage Monitoring of App Registrations in Azure

Manage monitoring and perform administrative remote actions on configured Azure App Registrations.

Get alerts before a Secret expires
Get alerts before a Certificate expires
Get information about the Owner
Get alerts if all Scopes are disabled
Federated credentials are included in the Monitoring
Customizable Monitoring Thresholds (Secrets and Certificates)

Nodinite make use of an App Registration to connect and authenticate with the Azure REST-Api. Please read more about this concept in the Azure Application Access user guide.

For your business and other end-users; Delegate the power to manage, and gain insights to selected App Registrations in Azure. Nodinite Monitoring aids the support and maintenance team's people in having additional data for root cause analysis without having individual direct access to the Microsoft Azure Portal. Reducing access limits the number of attack vectors, and having fewer people with fewer access rights minimizes the risk of disruption of mission-critical services.

Management Features

For Resources in the Role-based Monitor Views with the Remote Actions privilege grant; The following Remote Actions grouped by Category are available:

As an Administrator with access to the Configuration for Monitoring Agents, the additional Monitoring options are available:

Azure App Registration

Manage the set of monitored App Registrations from the App Registration Details page.

The 'Azure App Registration' Category provides one Resource for each configured App Registration to monitor with the specified display name as the Resource name.

Example from a Monitor View with a list of 'Azure App Registrations'.

See Monitoring App Registration for additional details about App Registration Monitoring.

The App Registration category provides Resources that display the evaluated monitored state according to built-in rules.

If the permission to perform Remote Action is granted; The following operations exist:

• Details

Details

Informations about the App Registration:

• Basic information
• Client Secrets
• Certificates^{New 6.2.1.2}
• Federated credentials
• Scopes
• Owners

To view the selected App Registration Resource and manage the set of monitored App Registration; Click the Action button and then click on the Details menu item within the 'Control Center' section.

Use the 'Details' action menu item to open the details modal for the selected App Registration.

Next, click the option to present the modal.

Essential information

Settings are set on the Subscription level. If you have multiple subscriptions for a single Tenant ID, only one of the configuration entries can have the App Registration Monitoring enabled.

Here's an example of the 'App Registration' details.

Client secrets

If an App Registration has Client Secrets, these are Monitored according to the global thresholds.

Here's an example of information about Client Secrets.

Certificates

^{New 6.2.1.2}
If an App Registration has Certificates, these are Monitored according to the global thresholds.

Here's an example of information about Certificates.

Federated credentials

Here's an example of information about Federated credentials.

Scopes

Here's an example of information about Scopes.

Owners

The App Registration in use must have the permission to read user profile to present information about Owners.

Here's an example of information about Owners.

Edit thresholds

Info

The settings are global, this means that regardless which App Registration you modify, the change affects all App Registrations.

You can manage the Monitoring thresholds individually for:

• Secrets
• Certificates^{New 6.2.1.2}

You can Edit the monitoring thresholds, click on the Action button and then click on the Edit menu item within the 'Control Center' section.

Example: Edit thresholds Action button menu item.

Next, click the option to present the modal.

Here's an example of editing the monitoring thresholds for the selected 'App Registration'.

• Description - The user-friendly description of the App Registrations monitoring configuration

Click the Save button to persist changes.

Save button.

Secret thresholds

You can manage the following monitoring properties for Secrets:

• Warning - Number of days before a Secret expires to trigger the Warning alert
• Error- Number of days before a Secret expires to trigger the Error alert

Certificate thresholds

^{New 6.2.1.2}
You can manage the following monitoring properties for Certificates:

• Warning - Number of days before Certificate expires to trigger the Warning alert
• Error- Number of days before Certificate expires to trigger the Error alert

Next Step

Monitoring App Registration
Configuring the Nodinite Azure Monitoring agent

Related

Azure Logging and Monitoring Overview
Prerequisites for Azure Agent