Skip to content
Contact us
  • There are no suggestions because the search field is empty.

User Risk: Create an Entra app registration

Overview

To get started with User Risk, you'll need to grant secure, read-only access to your user and SaaS usage data. We do this using the standard Microsoft Graph API, which requires creating a specific Entra application for User Risk.

Completing this step is essential because it allows you to connect your directory and start populating your User Risk dashboard with your own data.

In this article, we’ll walk you through how to gather the three values you’ll need to integrate your Entra directory with User Risk:

  • Client secret value
  • Application (client) ID
  • Directory (tenant) ID

 

Step 1: Create an Entra application registration for User Risk

  1. Open your Entra administration screen (https://entra.microsoft.com).
  2. Select App registrations.
  3. Click + New registration.
  4. Give the application registration a name and click Register.

To learn more, see Register an application in Microsoft Entra ID.

 

Step 2: Assign permissions

From the newly created application,

  1. Click API Permissions.
  2. Click + Add a permission.
  3. Click Microsoft Graph on the slide-out panel that appears.
  4. Select Application permissions.
  5. Type “Directory” in the Select permissions search field.
  6. Expand the Directory heading.
  7. Check the box next to Directory.Read.All.
  8. Click Add Permissions. You’ll now be back on the main Application registration screen
  9. Click Grant admin consent for Tennant.Entra API permissions page with the Grant admin consent button highlighted.
  10. Check the Status column and confirm that permission is still “Granted”.

To learn more, see Configure app permissions for a web API.

 

Step 3: Generate an application secret

  1. From the Application Registration screen, select Certificates & secrets from the left navigation.
  2. Add a Description and an expiry date on the slide-out panel.
  3. Click Add.
  4. After the secret is created, copy its Value using the copy icon. Entra shows this value only once, so store it somewhere safe — you'll enter it into User Risk during the integration.

Entra Certificates & secrets page with the new client secret and its copy icon highlighted.

The Client Secret must be entered into User Risk during the integration process.

To learn more, see Add and manage application credentials in Microsoft Entra ID.

 

Step 4: Gather the Tenant and Application ID

  1. Navigate to the Application Registration “Overview” screen.
  2. Copy the Application (client) ID and the Directory (tenant) ID from the Overview page. You'll enter both into User Risk during the integration.

 

Step 5: Enter the values into User Risk

  1. Click the settings cog in UpGuard’s top right corner.
  2. Click Directory Integration under User Risk in the left panel.
  3. Click Integrate via Entra app registration.
  4. Enter the Application (client) ID, Directory (tenant) ID, and Client secret value from earlier.