# Account Integration Procedures

Guide to integrating cloud accounts with the platform.

# AWS Account Integration

### **Link AWS Account** 

#### **Navigating to the Account Integration Page**

- **Log in to the Platform**
    
    
    - Access the platform and sign in using your credentials.
- **Open the Account Selector**
    
    
    - Locate the **Select account** dropdown at the top-right corner of the dashboard.
    - Click on it to open the list of available cloud accounts.
- **Add Cloud Account**
    
    
    - From the dropdown menu, click on **Add Cloud Account**. This will redirect you to the **Select Your Preferred Cloud Service or Platform** page.
    - Click on the **AWS (Amazon Web Services) card**.

**Note:** Initially, only **AWS Management Account** can be linked in this section.

[![wHf6mDfxuPWl23ZH-arhimage.png](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/scaled-1680-/mYmB5VMHnHj638eS-whf6mdfxupwl23zh-arhimage.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/mYmB5VMHnHj638eS-whf6mdfxupwl23zh-arhimage.png)

**No Management Account Initially**

If you do not have any management account linked initially to the Xops 360 Portal, follow the steps below to add a new AWS account. After clicking on the **AWS (Amazon Web Services)** card on the **Select Your Preferred Cloud Service or Platform** page, a new window will appear prompting you to select the **AWS Account Type**.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/scaled-1680-/NHchOC9tnkzuUIcm-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/NHchOC9tnkzuUIcm-image.png)

**Select AWS Account Type**

**On the **Select AWS Account Type** screen, you will see two options:**

<span style="background-color: rgb(194, 224, 244);"> </span>

- Management Account
- Linked Account

Click on **Management Account** to proceed with linking your AWS Management Account to the Xops 360 platform.

**Link a New AWS Account**

After selecting Management Account, you will be redirected to the Link a New AWS Account page.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/scaled-1680-/TGmggo6qWz3Brp3u-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/TGmggo6qWz3Brp3u-image.png)

#### **Initiating Account Integration**

- **Access Setup Instructions**
    
    
    - Click the **Information ("i") button** to view step-by-step setup guidance.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/scaled-1680-/uYOp26T3l1uvthQO-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/uYOp26T3l1uvthQO-image.png)

- **Retrieve AWS Role ARN**
    
    
    - Follow the setup guide to create a required **Cloud Formation stack** in the AWS **Management** Console.
    - Once the stack is created, navigate to the **Outputs tab** in the stack details page.
    - Copy the **AWS Role ARN** from the output.
- **Configure AWS Integration**
    
    
    - Return to the **Link a New AWS Account** page in the platform.
    - Provide a suitable name in the **AWS Account Name** field.
    - Paste the copied **AWS Role ARN** into the designated field.
    - Click **Connect** to finalize the integration.

##### **Adding a Linked AWS Account**

If you already have a management account linked to the Xops 360 Portal and want to add a **linked (child) AWS account**, follow these steps:

- **Log in to the Platform**
    
    
    - Sign in and open the platform dashboard.
- **Open the Account Selector**
    
    
    - Locate the **Select account** dropdown at the top-right corner of the dashboard.
    - Click on it to open the list of available cloud accounts.
- **Add Cloud Account**
    - From the dropdown menu, click on **Add Cloud Account**. This will redirect you to the **Select Your Preferred Cloud Service or Platform** page.
    - Click on the **AWS **(Amazon Web Services)** card** .
    - After clicking on the **AWS (Amazon Web Services)** card on the **Select Your Preferred Cloud Service or Platform** page, a new window will appear prompting you to select the **AWS Account Type**.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/scaled-1680-/HmPI5Ay0MiZ2pFNp-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/HmPI5Ay0MiZ2pFNp-image.png)

**Select AWS Account Type**

On the Select **AWS Account Type** screen, the **Linked Account** option will be displayed.

Click on Linked Account to proceed with linking your AWS Linked Account to the Xops 360 platform.

**Link a New AWS Account**

After selecting **Linked Account**, you will be redirected to the **Link a New AWS Account** page.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/scaled-1680-/bWqq36TLOcCL2Sj0-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/bWqq36TLOcCL2Sj0-image.png)

#### **Initiating Account Integration**

- **Access Setup Instructions**
    
    
    - Click the **Information ("i") button** to view step-by-step setup guidance.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/scaled-1680-/uYOp26T3l1uvthQO-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/uYOp26T3l1uvthQO-image.png)

- **Retrieve AWS Role ARN**
    
    
    - Follow the setup guide to create a required **Cloud Formation stack** in the AWS **Management** Console.
    - Once the stack is created, navigate to the **Outputs tab** in the stack details page.
    - Copy the **AWS Role ARN** from the output.
- **Configure AWS Integration**
    
    
    - Return to the **Link a New AWS Account** page in the platform.
    - Provide a suitable name in the **AWS Account Name** field.
    - Paste the copied **AWS Role ARN** into the designated field.
    - Click **Connect** to finalize the integration.

**Note:**

- For any challenges, please contact our support team at **<support@axiomio.com>**
- **First-Time Login Experience**
    - When you log in for the first time, you will be prompted to select your preferred **cloud service or platform** (AWS, EKS Azure, or Microsoft). This selection is required to establish the initial account connection.
    - Once your account is successfully connected to AWS, Azure, or Microsoft, this selection screen **will not appear** in subsequent logins. Instead, you will be directed **automatically to the Home page**.
    - To manage or modify integrations, navigate to the **"Integrations"** section from the left panel in the dashboard.

### **AWS Account Management** 

##### **Access AWS Integration Settings**

- **Log in to the Platform**
    
    
    - Sign in and open the platform dashboard.
- **Navigate to AWS Integration**
    
    
    - First, select the **respective account** from the **top-right corner** of the platform.  
        Choose the specific account for which you want to manage or update the AWS integration settings in the XOps portal.
    - Open the **profile menu** located in the **bottom-left corner** of the platform interface.
    - Click on your **profile/email section** to open the profile options.
    - Select **Accounts** from the menu.
    - You will be redirected to the **Integrations page**, where the **AWS Accounts integration settings** are available.

##### **Updating the Account Name**

- **Edit the AWS Account Name**
    
    
    - Locate the **Edit** option next to the existing AWS account name.
    - Click the **Edit** button to enable modifications.

[![Screenshot 2026-03-12 175729.png](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/scaled-1680-/YmAuMZHGhK7SU4rN-screenshot-2026-03-12-175729.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/YmAuMZHGhK7SU4rN-screenshot-2026-03-12-175729.png)

1. **Save the New Name**
    
    
    - Enter the new AWS account name in the provided field.
    - Click **Proceed** to confirm the changes.
    - A success message will appear, indicating the account name update.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/scaled-1680-/7wlMkdvOlk2nHkMh-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/7wlMkdvOlk2nHkMh-image.png)

##### **Deleting Linked Account** 

- **Delete the AWS Account**
    
    
    - Locate the **Delete** option next to the existing AWS account name.
    - Click the **Delete**.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/scaled-1680-/RGmMBqVLYnKJIiNK-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/RGmMBqVLYnKJIiNK-image.png)

- **Enter the Account Name**
    
    
    - Enter the AWS account name in the provided field.
    - Click **Delete Account** to confirm the changes.
    - A success message will appear, indicating Account has been deleted.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/scaled-1680-/MnqRZX06pgtgfZ3a-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2026-03/MnqRZX06pgtgfZ3a-image.png)

Note: There is currently no provision to delete AWS Management accounts from the Xops portal. To delete the account, submit a support request via the following link:

Submit Support Request

**Request Submission Guidelines:**

- **Subject:** Clearly state that the request is for AWS Management account deletion.
- **Description:** Provide a detailed explanation of your request, including relevant account details and the reason for deletion.
- Once submitted, our support team will review your request and assist you accordingly.

# Azure Account Integration

### **Link Azure Account** 

#### **Navigating to the Integrations Page**

- **Log in to the Platform**
    
    
    - Access the platform and sign in using your credentials.
- **Open the Integrations Section**
    
    
    - Locate the side navigation panel on the left.
    - Click on the **Integrations** tab.
- **Select Azure Integration**
    
    
    - On the Integrations page, you will see available options for **AWS, Azure, and Microsoft accounts**.
    - Click on the **Azure card** to open the “Link a New Azure Account” page.

[![ARHimage.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-01/scaled-1680-/wHf6mDfxuPWl23ZH-arhimage.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-01/wHf6mDfxuPWl23ZH-arhimage.png)

Note: Follow <span style="color: rgb(0, 0, 0);">**Initiating Azure Integration** s</span>teps to Connect Azure Account in Xops 360, ensure that the following permissions are assigned

### <span style="color: rgb(0, 0, 0);">**Initiating Azure Integration**</span>


##### **Registering an Application in Azure**

- Navigate to the **[Azure Portal](https://portal.azure.com/)**.
- In the search bar, enter **App Registrations** and select it from the results.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/4Lc6QceMq5jy4kF9-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/4Lc6QceMq5jy4kF9-image.png)

- Click on **New Registration**.
- Register the application:
    
    
    - Provide a name for the application.
    - Under **Supported account types**, select **Accounts in this organizational directory only** if not set by default.
    - Click **Register** to complete the process.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/h8HsC98CUOcHJiO6-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/h8HsC98CUOcHJiO6-image.png)

##### **Assigning Entra ID Permissions**

- In the **[Azure Portal](https://portal.azure.com/)**, search for **Entra ID** and select it.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/L9iBvBc1x3Td09h5-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/L9iBvBc1x3Td09h5-image.png)

- Navigate to **Properties**, then locate the setting **Access management for Azure resources** and toggle it to **Yes**.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/Ouzk4HM4rqSK8Ix1-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/Ouzk4HM4rqSK8Ix1-image.png)

- Go to **Overview**, and in the left navigation pane, click **Roles and Administrators**.
- Search for **Global Reader** and select it.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/b4DzjZ5SRsJ7og4O-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/b4DzjZ5SRsJ7og4O-image.png)

- Under **Assignments**, search for the application registered in the previous step, select it, and click **Add** to grant the **Global Reader** role to the application.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/QH80y1LuvfNIoqxQ-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/QH80y1LuvfNIoqxQ-image.png)

##### **Assigning Management Group Permissions**

- In the **Azure Portal**, search for **Management Groups** and select it.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/teQywypvkCQI6Yx1-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/teQywypvkCQI6Yx1-image.png)

- Navigate to **Tenant Group** and select the relevant **Subscription**.
- In the left navigation pane, go to **Access Control (IAM)** and click **Add**, then select **Add Role Assignment**.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/bq7qG6x8ZvLAAFvh-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/bq7qG6x8ZvLAAFvh-image.png)

- Under **Roles**, search for **Reader**, select it, and click **Next**.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/XNV1cxiRWVfYhIE5-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/XNV1cxiRWVfYhIE5-image.png)

- Under **Members**, click **Select members**, search for the application name created earlier, and select it.
- Click **Select**, then **Review + Assign** to complete the role assignment.

##### **Assigning Key Vault Reader Permissions (If Applicable)**

- Follow the same steps as assigning **Global Reader** permissions to grant **Key Vault Reader** permissions.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/50pw8KsUdO4Gd3o1-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/50pw8KsUdO4Gd3o1-image.png)

- If **Key Vaults** are configured with **Access Policies** (instead of **RBAC**), explicit permissions must be assigned to the application:
    
    
    - Grant **List/Get Keys** and **List Secrets** permissions for each Key Vault.

##### **Adding a Certificate for Authentication**

- Navigate to the previously created **Application Registration**.
- Copy the **Application (Client) ID** and **Directory (Tenant) ID**.
- Access the **[Xops 360 Portal](https://xops.axiomio.com/)** and navigate to **Integrations** , Select **Azure** icon then click on **Add Account**.
    
    
    - Enter a friendly name for the account.
    - Provide the **App ID** and **Tenant ID** copied earlier.
    - Click **Generate Public Key &amp; Download** the generated key.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/zsgnqOnZOsXWxgNm-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/zsgnqOnZOsXWxgNm-image.png)

- Return to the **Azure Portal**, open the application, and go to **Manage** &gt; **Certificates &amp; Secrets**.
- Click **Upload Certificate**, select the certificate file downloaded earlier, and click **Add** to complete the upload process.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/gRf9XelYLknxttzY-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/gRf9XelYLknxttzY-image.png)

**Note:**

- For any challenges, please contact our support team at **<support@axiomio.com>**
- **First-Time Login Experience**
- - When you log in for the first time, you will be prompted to select your preferred **cloud service or platform** (AWS, Azure, or Microsoft). This selection is required to establish the initial account connection.
    - Once your account is successfully connected to AWS, Azure, or Microsoft, this selection screen **will not appear** in subsequent logins. Instead, you will be directed **automatically to the Home page**.
    - To manage or modify integrations, navigate to the **"Integrations"** section from the left panel in the dashboard.

### **Managing Azure Subscriptions**

- **Access the Subscription Management Page**
    - Log in to the platform with your credentials.
    - Navigate to the **Integrations** section, Select Azure icon.
    - Select the connected **Azure account** to access the **Subscription Management** page.

#### **Connecting Azure Subscriptions**

- **Edit the Connected Azure Account**
    - Locate the Azure account under **Integrations**.
    - Click **Edit** to open the subscription management interface.
- **View and Select Subscriptions**
    - **List of Subscriptions**: Displays all available Azure subscriptions.
    - **Selected Subscriptions**: Highlights currently connected subscriptions.
- **Select Desired Subscriptions**
    - Review the list of available subscriptions.
    - Check the boxes next to the subscriptions you want to connect.
- **Apply Changes**
    - Click **Update** to save and apply changes.
    - Newly added subscriptions will be available in the platform.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-01/scaled-1680-/A1znKwMBmEXg1KZR-UA7image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-01/A1znKwMBmEXg1KZR-UA7image.png)

#### **Disconnecting Azure Subscriptions**

- **Edit the Connected Azure Account**
    - Go to the **Integrations** section and locate the Azure account.
    - Click **Edit** to manage the account’s subscriptions.
- **Deselect Subscriptions**
    - Under **Selected Subscriptions**, uncheck the subscriptions you want to disconnect.
- **Apply Changes**
    - Click **Update** to finalize changes.
    - The deselected subscriptions will no longer be associated with your account.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-01/scaled-1680-/JKcHV1iaWWJGvJ3s-0hHimage.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-01/JKcHV1iaWWJGvJ3s-0hHimage.png)

# Microsoft 365 Account Integration

#### **Navigating to the Integrations Page**

- **Log in to the Platform**
    
    
    - Access the platform and sign in using your credentials.
- **Open the Integrations Section**
    
    
    - Locate the side navigation panel on the left.
    - Click on the **Integrations** tab.
- **Select Microsoft Integration**
    
    
    - On the Integrations page, you will see available options for **AWS, Azure, and Microsoft accounts**.
    - Click on the **Microsoft card** then click on **M365** to open the “Link a New Microsoft Account” page.

[![ARHimage.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-01/scaled-1680-/wHf6mDfxuPWl23ZH-arhimage.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-01/wHf6mDfxuPWl23ZH-arhimage.png)

Note: Follow <span style="color: rgb(0, 0, 0);">**Initiating M365 Integration** s</span>teps to Connect Microsoft 365 Account in Xops 360, ensure that the following permissions are assigned

#### **Initiating M365 Integration**

##### **Registering an Application and configuration in Microsoft Entra Admin center**

- Navigate to the **[Microsoft Entra Admin Center](https://aka.ms/MSEntraPortal)** **Portal**.
- In the search bar, enter **App Registrations** and select it from the results.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/1WBuI1zCB756M681-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/1WBuI1zCB756M681-image.png)

- Click on **New Registration**.
- Register the application:
    
    
    - Provide a name for the application.
    - Under **Supported account types**, select **Accounts in this organizational directory only** if not set by default.
    - Click **Register** to complete the process.

![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/fn6K7V7WE547IcwG-image.png)

- Navigate to **Manage** and click on **API Permissions**.
- Click on **Add a permission**.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/5xcQPcc2AbhsgERB-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/5xcQPcc2AbhsgERB-image.png)

- Select **APIs my organization uses** and search for **Office 365 Exchange Online**, then click on it.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/NoxidNsHYp6byF78-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/NoxidNsHYp6byF78-image.png)

- Choose **Application permissions**, search for **Exchange.ManageAsApp**, select it, and click **Add permissions**.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/Ubf7YTqJpnckSS3a-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/Ubf7YTqJpnckSS3a-image.png)

- Click on **Grant admin consent** and confirm by selecting **Yes** in the confirmation popup.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/57x0zIfk6LOIqPnO-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/57x0zIfk6LOIqPnO-image.png)

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/AsOogaAC82YDW4D9-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/AsOogaAC82YDW4D9-image.png)

##### **Assigning Entra ID Permissions**

- In the **Azure Portal**, search for **Entra ID** and select it.

![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/ynflBHk8nbkhYZwz-image.png)

- Go to **Overview**, and in the left navigation pane, click **Roles and Administrators**.
- Search for **Global Reader** and select it.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/v5mR8RgLjni2zhpY-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/v5mR8RgLjni2zhpY-image.png)

- Under **Assignments**, search for the application registered in the previous step, select it, and click **Add** to grant the **Global Reader** role to the application.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/TGiIMtv54JGZCPOR-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/TGiIMtv54JGZCPOR-image.png)

##### **Adding a Certificate for Authentication**

- Navigate to the previously created **Application Registration**.
- Copy the **Application (Client) ID** and **Directory (Tenant) ID**.
- Go to Domain names, copy the **Organization ID**

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/ctedUZhTWjm64flS-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/ctedUZhTWjm64flS-image.png)

- Access the **[Xops 360 Portal](https://xops.axiomio.com/)** and navigate to **Integrations** , Select **Microsoft** icon then click on **Add Account for Microsoft**.
    
    
    - Enter a friendly name for the account.
    - Provide the **App ID, Tenant ID** copied earlier.
    - Provide the **Organization ID copied earlier.**
    - Click **Generate Public Key &amp; Download** the generated key.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/kyUWtwzbKVLs5NTW-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/kyUWtwzbKVLs5NTW-image.png)

- Return to the **Microsoft Entra Admin center Portal**, open the application, and go to **Manage** &gt; **Certificates &amp; Secrets**.
- Click **Upload Certificate**, select the certificate file downloaded earlier, and click **Add** to complete the upload process.

**Note:** The M365 scan requires all users/accounts to have the **O365\_BUSINESS\_PREMIUM** license; missing licenses may cause scan failure.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/gRf9XelYLknxttzY-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/gRf9XelYLknxttzY-image.png)

**Note:**

- For any challenges, please contact our support team at **<support@axiomio.com>**
- **First-Time Login Experience**
    - When you log in for the first time, you will be prompted to select your preferred **cloud service or platform** (AWS, Azure, or Microsoft). This selection is required to establish the initial account connection.
    - Once your account is successfully connected to AWS, Azure, or Microsoft, this selection screen **will not appear** in subsequent logins. Instead, you will be directed **automatically to the Home page**.
    - To manage or modify integrations, navigate to the **"Integrations"** section from the left panel in the dashboard.

# Microsoft Entra ID Account Integration

#### **Navigating to the Integrations Page**

- **Log in to the Platform**
    
    
    - Access the platform and sign in using your credentials.
- **Open the Integrations Section**
    
    
    - Locate the side navigation panel on the left.
    - Click on the **Integrations** tab.
- **Select Microsoft Integration**
    
    
    - On the Integrations page, you will see available options for **AWS, Azure, and Microsoft accounts**.
    - Click on the **Microsoft card** then click on **M365** to open the “Link a New Microsoft Account” page.

[![ARHimage.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-01/scaled-1680-/wHf6mDfxuPWl23ZH-arhimage.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-01/wHf6mDfxuPWl23ZH-arhimage.png)

#### **Initiating Entra ID Integration**


##### **Registering an Application and configuration in Microsoft Entra Admin center**

- Navigate to the **[Microsoft Entra Admin Center](https://aka.ms/MSEntraPortal) Portal**.
- In the search bar, enter **App Registrations** and select it from the results.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/1WBuI1zCB756M681-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/1WBuI1zCB756M681-image.png)

- Click on **New Registration**.
- Register the application:
    
    
    - Provide a name for the application.
    - Under **Supported account types**, select **Accounts in this organizational directory only** if not set by default.
    - Click **Register** to complete the process.

![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/fn6K7V7WE547IcwG-image.png)

- Navigate to **Manage** and click on **API Permissions**.
- Click on **Add a permission**.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/5xcQPcc2AbhsgERB-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/5xcQPcc2AbhsgERB-image.png)

- Select **Microsoft APIs** and click on **Microsoft Graph**.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/8xBH0WionaV1NA2N-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/8xBH0WionaV1NA2N-image.png)

- Choose **Application permissions**, search for **AccessReview.Read.All**, select it, and click **Add permissions**.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/X1jvDiTtIRuMkNSN-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/X1jvDiTtIRuMkNSN-image.png)

- Click on **Grant admin consent** and confirm by selecting **Yes** in the confirmation popup.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/4wYMWWWcvc51SzSk-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/4wYMWWWcvc51SzSk-image.png)

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/AsOogaAC82YDW4D9-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/AsOogaAC82YDW4D9-image.png)

##### **Assigning Entra ID Permissions**

- In the **Azure Portal**, search for **Entra ID** and select it.

![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/ynflBHk8nbkhYZwz-image.png)

- Go to **Overview**, and in the left navigation pane, click **Roles and Administrators**.
- Search for **Global Reader** and select it.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/v5mR8RgLjni2zhpY-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/v5mR8RgLjni2zhpY-image.png)

- Under **Assignments**, search for the application registered in the previous step, select it, and click **Add** to grant the **Global Reader** role to the application.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/TGiIMtv54JGZCPOR-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/TGiIMtv54JGZCPOR-image.png)

##### **Adding a Certificate for Authentication**

- Navigate to the previously created **Application Registration**.
- Copy the **Application (Client) ID** and **Directory (Tenant) ID**.
- Go to Domain names, copy the **Organization ID**
- Access the **[Xops 360 Portal](https://xops.axiomio.com/)** and navigate to **Integrations** , Select **Microsoft** icon then click on **Add Account for Microsoft**.
- Enter a friendly name for the account.
- Provide the **App ID, Tenant ID** copied earlier.
- Click **Generate Public Key &amp; Download** the generated key.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/kyUWtwzbKVLs5NTW-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/kyUWtwzbKVLs5NTW-image.png)

- Return to the **Microsoft Entra Admin center Portal**, open the application, and go to **Manage** &gt; **Certificates &amp; Secrets**.
- Click **Upload Certificate**, select the certificate file downloaded earlier, and click **Add** to complete the upload process.

[![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/scaled-1680-/gRf9XelYLknxttzY-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-02/gRf9XelYLknxttzY-image.png)

**Note:**

- For any challenges, please contact our support team at **<support@axiomio.com>**
- **First-Time Login Experience**
- - When you log in for the first time, you will be prompted to select your preferred **cloud service or platform** (AWS, Azure, or Microsoft). This selection is required to establish the initial account connection.
    - Once your account is successfully connected to AWS, Azure, or Microsoft, this selection screen **will not appear** in subsequent logins. Instead, you will be directed **automatically to the Home page**.
    - To manage or modify integrations, navigate to the **"Integrations"** section from the left panel in the dashboard.

# EKS Integration

### **Link EKS Account** 

#### **Navigating to the Integrations Page**

- **Log in to the Platform**
    
    
    - Access the platform and sign in using your credentials.
- **Open the Integrations Section**
    
    
    - Locate the side navigation panel on the left.
    - Click on the **Integrations** tab.
- **Select EKS Integration**
    
    
    - On the Integrations page, you will see available options for **AWS, Azure, Microsoft accounts and EKS**.
    - Click on the EKS **card** to open the “Link a New AWS Account” page.

 [![eks int.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-09/scaled-1680-/Wld6OLfS2nLF7Z4L-eks-int.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-09/Wld6OLfS2nLF7Z4L-eks-int.png)

#### **Initiating Account Integration**

- **Access Setup Instructions**
    
    
    - Click the **Information ("i") button** to view step-by-step setup guidance.
- **Retrieve AWS Role ARN**
    
    
    - Follow the setup guide to create a required **Cloud Formation stack** in the AWS **Management** Console.
    - Once the stack is created, navigate to the **Outputs tab** in the stack details page.
    - Copy the **AWS Role ARN** from the output.
- **Configure AWS Integration**
    
    
    - Return to the platform’s **AWS Integration** page.
    - Provide a suitable name in the **AWS Account Name** field.
    - Paste the copied **AWS Role ARN** into the designated field.
    - Click **Connect** to finalize the integration.

 [![image.png](https://xops-docs.axiomio.com/uploads/images/gallery/2025-09/scaled-1680-/FH3w1cOLKhiYzvub-image.png)](https://xops-docs.axiomio.com/uploads/images/gallery/2025-09/FH3w1cOLKhiYzvub-image.png)

**Note:**

- For any challenges, please contact our support team at **<support@axiomio.com>**
- **First-Time Login Experience**
    - When you log in for the first time, you will be prompted to select your preferred **cloud service or platform** (AWS, EKS Azure, or Microsoft). This selection is required to establish the initial account connection.
    - Once your account is successfully connected to AWS, Azure, or Microsoft, this selection screen **will not appear** in subsequent logins. Instead, you will be directed **automatically to the Home page**.
    - To manage or modify integrations, navigate to the **"Integrations"** section from the left panel in the dashboard.