# Assign permissions to the WindowsDefenderATPSiemConnector application

1\.     Log in to the Microsoft Azure Portal at[ https://portal.azure.com](https://portal.azure.com/) with a user account that has either the Application Administrator or Global Administrator Role assigned.

2\. Type App registrations in the Search bar.

![](/files/-MgssON9tH6-oPHaL7Wx)

3\. Click App Registrations in the search results.

4\. Click All applications on the App registrations page

\ <br>

![](/files/-MgsuCGPgZzAkAZTf28K)

5\. Select WindowsDefenderATPSiemConnector from the Application list.

![](/files/-MgsuOgzQabHm-Zn_vXs)

6\. Select A  PI permissions from the left-hand menu.

![](/files/-MgsuRwqGFwVr7JnZtNZ)

7\. Click the Add a permission button.

![](/files/-MgsuXmWMr7BDm3eIgpu)

8\.  Select the APIs my organization uses tab on the Request API permissions fly-out.

![](/files/-Mgsu_epJxT-AdHFdL_f)

9\. Type **W** **indowsDefender** in the Search field.

10\. Select WindowsDefenderATP from the search results.

![](/files/-Mgsuo9CavWfyEPQtw50)

11\. Select the Delegated permissions category.

![](/files/-Mgsuw0bNbTeYPSekzIL)

12\. Expand the AdvancedQuery permission and select the AdvancedQuery.Read checkbox.

![](/files/-Mgsv-Km__p5CF6ge_-E)

13\. Select the Application permissions category.

![](/files/-MgsvUmHLFTZUMez_9ul)

14\. Expand the AdvancedQuery permission and select the AdvancedQuery.Read.All checkbox.

![](/files/-MgsvXgDb0iXy0xl6crV)

15\.          Expand the Alerts permission and select the Alert.Read.All checkbox.

![](/files/-Mgsv_DPL68W1Sboba95)

16\. Expand the Machine permission and select the Machine.Read.All checkbox.

![](/files/-MgsvbguPArMJpVv0pfM)

17\. Click the Add permissions button.

![](/files/-Mgsve4q0X6vIbXJoAKr)

\
18\. Click the Grant admin consent for… button.

![](/files/-MgswE-ivdjbCIwWZo5u)

##


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.blusapphire.io/log-forwarding/03_log-forwarding-guide/cloud-log-forwarding/azure-microsoft/microsoft-defender-atp/assign-permissions-to-the-windowsdefenderatpsiemconnector-application.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
