diff --git a/docs/getting-started/requirements.md b/docs/getting-started/requirements.md index d2ebd8a12b..d9e325b911 100644 --- a/docs/getting-started/requirements.md +++ b/docs/getting-started/requirements.md @@ -247,6 +247,7 @@ Prowler for M365 requires two types of permission scopes to be set (if you want - `User.Read` (IMPORTANT: this must be set as **delegated**): Required for the sign-in. - `Sites.Read.All`: Required for SharePoint service. - `SharePointTenantSettings.Read.All`: Required for SharePoint service. + - `Domain.Read.All`: Required for `defender_domain_spf_records_published` check. - **Powershell Modules Permissions**: These are set at the `M365_USER` level, so the user used to run Prowler must have one of the following roles: - `Global Reader` (recommended): this allows you to read all roles needed. diff --git a/docs/tutorials/microsoft365/getting-started-m365.md b/docs/tutorials/microsoft365/getting-started-m365.md index 067b31a1dd..01f75a838b 100644 --- a/docs/tutorials/microsoft365/getting-started-m365.md +++ b/docs/tutorials/microsoft365/getting-started-m365.md @@ -119,6 +119,7 @@ Follow these steps to assign the permissions: 3. Search and select every permission below and once all are selected click on `Add permissions`: - `Directory.Read.All` + - `Domain.Read.All` - `Policy.Read.All` - `Sites.Read.All` - `SharePointTenantSettings.Read.All`