Missing pre-req - Entra ID applications

[dhancocksqbe]

Hi, the pre-requisite section is missing a requirement. The account you use to create the DfC integration on Azure needs ability to create/manage EntraID applications in addition to contributor on the target subscription. Without that it fails with a 401 error on the Graph API. Only way to see what it needs is to turn on developer tools when creating the integration and look at the network requests.

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: f48f68b8-f15e-d900-8e61-6aadec8aeecd
• Version Independent ID: d4a1522c-2764-83aa-006c-0cdb00951e63
• Content: Connect your AWS account - Microsoft Defender for Cloud
• Content Source: articles/defender-for-cloud/quickstart-onboard-aws.md
• Service: defender-for-cloud
• GitHub Login: @dcurwin
• Microsoft Alias: dacurwin

[Naveenommi-MSFT]

@dhancocksqbe Thanks for your feedback! We will investigate and update as appropriate.

[SaibabaBalapur-MSFT]

@dhancocksqbe Thanks for bringing this to our attention. I'm going to assign this to the document author so they can take a look at it accordingly.

@dcurwin Can you please check and add your comments on this doc update request as applicable.

[dcurwin]

label:"backlog-item-created"