> For the complete documentation index, see [llms.txt](https://docs.blusapphire.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.blusapphire.io/log-forwarding/03_log-forwarding-guide/cloud-log-forwarding/azure-microsoft/microsoft-defender-atp/assign-permissions-to-the-windowsdefenderatpsiemconnector-application.md).

# Assign permissions to the WindowsDefenderATPSiemConnector application

1\.     Log in to the Microsoft Azure Portal at[ https://portal.azure.com](https://portal.azure.com/) with a user account that has either the Application Administrator or Global Administrator Role assigned.

2\. Type App registrations in the Search bar.

![](/files/-MgssON9tH6-oPHaL7Wx)

3\. Click App Registrations in the search results.

4\. Click All applications on the App registrations page

\ <br>

![](/files/-MgsuCGPgZzAkAZTf28K)

5\. Select WindowsDefenderATPSiemConnector from the Application list.

![](/files/-MgsuOgzQabHm-Zn_vXs)

6\. Select A  PI permissions from the left-hand menu.

![](/files/-MgsuRwqGFwVr7JnZtNZ)

7\. Click the Add a permission button.

![](/files/-MgsuXmWMr7BDm3eIgpu)

8\.  Select the APIs my organization uses tab on the Request API permissions fly-out.

![](/files/-Mgsu_epJxT-AdHFdL_f)

9\. Type **W** **indowsDefender** in the Search field.

10\. Select WindowsDefenderATP from the search results.

![](/files/-Mgsuo9CavWfyEPQtw50)

11\. Select the Delegated permissions category.

![](/files/-Mgsuw0bNbTeYPSekzIL)

12\. Expand the AdvancedQuery permission and select the AdvancedQuery.Read checkbox.

![](/files/-Mgsv-Km__p5CF6ge_-E)

13\. Select the Application permissions category.

![](/files/-MgsvUmHLFTZUMez_9ul)

14\. Expand the AdvancedQuery permission and select the AdvancedQuery.Read.All checkbox.

![](/files/-MgsvXgDb0iXy0xl6crV)

15\.          Expand the Alerts permission and select the Alert.Read.All checkbox.

![](/files/-Mgsv_DPL68W1Sboba95)

16\. Expand the Machine permission and select the Machine.Read.All checkbox.

![](/files/-MgsvbguPArMJpVv0pfM)

17\. Click the Add permissions button.

![](/files/-Mgsve4q0X6vIbXJoAKr)

\
18\. Click the Grant admin consent for… button.

![](/files/-MgswE-ivdjbCIwWZo5u)

##