> ## Documentation Index
> Fetch the complete documentation index at: https://docs.driftmark.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft tenants

> Connect Microsoft tenants and manage tenant-level configuration.

# Microsoft tenants

Driftmark connects to Microsoft Entra ID tenants using Microsoft Graph application permissions.

## What a tenant connection includes

Each connection stores:

* tenant ID
* client ID
* encrypted client secret
* connection status
* optional label
* selected template
* snapshot schedule
* optional report schedule

## Adding a tenant

Go to:

`Settings -> Integrations -> Microsoft`

Choose **Add tenant** and enter:

* `Tenant ID`
* `Client ID`
* `Client Secret`
* optional label

Driftmark validates the credentials before saving the connection.

If you need help creating the Microsoft Entra app registration first, follow [Microsoft App Registration setup](microsoft-app-registration).

## Required permissions

At minimum, the connected application must have:

* `Organization.Read.All`

Additional Graph application permissions depend on the enabled controls in the selected template.

After assigning permissions in Azure, you must grant admin consent or the connection will not work.

## Connection health

Connections surface a status such as:

* `connected`
* `error`
* `paused`

The tenant page also shows:

* last validated time
* last sync time
* last error

## Tenant detail page

The tenant detail page lets you:

* edit connection metadata
* assign a template
* configure snapshot schedule
* configure report schedule if the plan supports it
* run a manual snapshot
* download a PDF report
* review recent snapshot history

## Plan-based behavior

Some capabilities are plan-dependent:

* Core plan cannot use report schedules
* Core plan cannot schedule hourly snapshots
* Standard supports monthly report schedules
* Pro and MSP plans support monthly and quarterly report schedules

## Tenant limits

Workspace plans can cap how many tenant connections are allowed. When that limit is reached, the app disables adding new tenants until the plan is upgraded or a connection is removed.