docs(m365): add documentation for m365 (#7622)

Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>

docs/tutorials/microsoft365/getting-started-m365.md

@@ -0,0 +1,205 @@
+# Getting Started with M365 on Prowler Cloud
+
+Set up your M365 account to enable security scanning using Prowler Cloud.
+
+## Requirements
+
+To configure your M365 account, you’ll need:
+
+1. Obtain your `Default Domain` from the Entra ID portal.
+
+2. Access Prowler Cloud and add a new cloud provider `Microsoft 365`.
+
+3. Configure your M365 account:
+
+    3.1 Create the Service Principal app.
+
+    3.2 Grant the required API permissions.
+
+    3.3 Assign the required roles to your user.
+
+    3.4 Retrieve your encrypted password.
+
+4. Add the credentials to Prowler Cloud.
+
+## Step 1: Obtain your Domain
+
+Go to the Entra ID portal, then you can search for `Domain` or go to Identity > Settings > Domain Names.
+
+![Search Domain Names](./img/search-domain-names.png)
+
+<br>
+
+![Custom Domain Names](./img/custom-domain-names.png)
+
+Once you are there just look for the `Default Domain` this should be something similar to `YourCompany.onmicrosoft.com`. To ensure that you are picking the correct domain just click on it and verify that the type is `Initial` and you can't delete it.
+
+![Search Default Domain](./img/search-default-domain.png)
+
+---
+
+## Step 2: Access Prowler Cloud
+
+1. Go to [Prowler Cloud](https://cloud.prowler.com/)
+2. Navigate to `Configuration` > `Cloud Providers`
+
+    ![Cloud Providers Page](../img/cloud-providers-page.png)
+
+3. Click on `Add Cloud Provider`
+
+    ![Add a Cloud Provider](../img/add-cloud-provider.png)
+
+4. Select `Microsoft 365`
+
+    ![Select Microsoft 365](./img/select-m365-prowler-cloud.png)
+
+5. Add the Domain ID and an optional alias, then click `Next`
+
+    ![Add Domain ID](./img/add-domain-id.png)
+
+---
+
+## Step 3: Configure your M365 account
+
+
+### Create the Service Principal app
+
+A Service Principal is required to grant Prowler the necessary privileges.
+
+1. Access **Microsoft Entra ID**
+
+    ![Overview of Microsoft Entra ID](./img/microsoft-entra-id.png)
+
+2. Navigate to `Applications` > `App registrations`
+
+    ![App Registration nav](./img/app-registration-menu.png)
+
+3. Click `+ New registration`, complete the form, and click `Register`
+
+    ![New Registration](./img/new-registration.png)
+
+4. Go to `Certificates & secrets` > `+ New client secret`
+
+    ![Certificate & Secrets nav](./img/certificates-and-secrets.png)
+
+5. Fill in the required fields and click `Add`, then copy the generated value (that value will be `AZURE_CLIENT_SECRET`)
+
+    ![New Client Secret](./img/new-client-secret.png)
+
+With this done you will have all the needed keys, summarized in the following table
+
+| Value | Description |
+|-------|-------------|
+| Client ID | Application (client) ID |
+| Client Secret | AZURE_CLIENT_SECRET |
+| Tenant ID | Directory (tenant) ID |
+
+---
+
+### Grant required API permissions
+
+Assign the following Microsoft Graph permissions:
+
+- `Directory.Read.All`: Required for all services.
+- `Policy.Read.All`: Required for all services.
+- `User.Read` (IMPORTANT: this is set as **delegated**): Required for the sign-in.
+- `Sites.Read.All`: Required for SharePoint service.
+- `SharePointTenantSettings.Read.All`: Required for SharePoint service.
+
+Follow these steps to assign the permissions:
+
+1. Go to your App Registration > Select your Prowler App created before > click on `API permissions`
+
+    ![API Permission Page](./img/api-permissions-page.png)
+
+2. Click `+ Add a permission` > `Microsoft Graph` > `Application permissions`
+
+    ![Add API Permission](./img/add-app-api-permission.png)
+
+3. Search and select every permission below and once all are selected click on `Add permissions`:
+
+    - `Directory.Read.All`
+    - `Policy.Read.All`
+    - `Sites.Read.All`
+    - `SharePointTenantSettings.Read.All`
+
+    ![Permission Screenshots](./img/directory-permission.png)
+
+4. Click `Add permissions`, then grant admin consent
+
+    ![Grant Admin Consent](./img/grant-admin-consent.png)
+
+5. Click `+ Add a permission` > `Microsoft Graph` > `Delegated permissions`
+
+    ![Add API Permission](./img/add-delegated-api-permission.png)
+
+6. Search and select:
+
+    - `User.Read`
+
+    ![Permission Screenshots](./img/directory-permission-delegated.png)
+
+7. Click `Add permissions`, then grant admin consent
+
+    ![Grant Admin Consent](./img/grant-admin-consent-delegated.png)
+
+---
+
+### Assign required roles to your user
+
+Assign one of the following roles to your User:
+
+- `Global Reader` (recommended): this allows you to read all roles needed.
+- `Exchange Administrator` and `Teams Administrator`: user needs both roles but with this [roles](https://learn.microsoft.com/en-us/exchange/permissions-exo/permissions-exo#microsoft-365-permissions-in-exchange-online) you can access to the same information as a Global Reader (here you only read so that's why we recomend that role).
+
+Follow these steps to assign the role:
+
+1. Go to Users > All Users > Click on the email for the user you will use
+
+    ![User Overview](./img/user-info-page.png)
+
+2. Click `Assigned Roles`
+
+    ![User Roles](./img/user-role-page.png)
+
+3. Click on `Add assignments`, then search and select:
+
+    - `Global Reader` This is the recommended, if you want to use the others just search for them
+
+    ![Global Reader Screenshots](./img/global-reader.png)
+
+4. Click on next, then assign the role as `Active`, and click on `Assign` to grant admin consent
+
+    ![Grant Admin Consent for Role](./img/grant-admin-consent-for-role.png)
+
+---
+
+### Get your encrypted password
+
+For this step you will need to use PowerShell, here you will have to create your Encrypted Password based on the password of the User that you are going to use. For more information about how to generate this Password go [here](../../getting-started/requirements.md#service-principal-and-user-credentials-authentication-recommended) and follow the steps needed to obtain `M365_ENCRYPTED_PASSWORD`.
+
+---
+
+## Step 4: Add credentials to Prowler Cloud
+
+1. Go to your App Registration overview and copy the `Client ID` and `Tenant ID`
+
+    ![App Overview](./img/app-overview.png)
+
+2. Go to Prowler Cloud and paste:
+
+    - `Client ID`
+    - `Tenant ID`
+    - `AZURE_CLIENT_SECRET` from earlier
+    - `M365_USER` your user using the default domain, more info [here](../../getting-started/requirements.md#service-principal-and-user-credentials-authentication-recommended)
+    - `M365_ENCRYPTED_PASSWORD` generated before
+
+    ![Prowler Cloud M365 Credentials](./img/add-credentials-m365-prowler-cloud.png)
+
+3. Click `Next`
+
+    ![Next Detail](./img/click-next-m365.png)
+
+4. Click `Launch Scan`
+
+    ![Launch Scan M365](./img/launch-scan.png)

docs/tutorials/microsoft365/use-of-powershell.md

@@ -0,0 +1,12 @@
+PowerShell is required by this provider because it is the only way to retrieve data from certain Microsoft 365 services.
+
+## Installing PowerShell
+
+If you are using Prowler Cloud, you don't need to worry about PowerShell — it is already installed in our infrastructure.
+However, if you want to run Prowler on your own, you must have PowerShell installed to execute the full M365 provider and retrieve all findings.
+To learn more about how to install PowerShell and which versions are supported, click [here](../../getting-started/requirements.md#supported-powershell-versions).
+
+## Required Modules
+
+The necessary modules will not be installed automatically by Prowler. Nevertheless, if you want Prowler to install them for you, you can execute the provider with the flag `--init-modules`, which will run the script to install and import them.
+If you want to learn more about this process or you are running some issues with this, click [here](../../getting-started/requirements.md#needed-powershell-modules).

docs/tutorials/prowler-app.md

@@ -150,6 +150,13 @@ By default, the `kubeconfig` file is located at `~/.kube/config`.
 
 ---
 
+### **Step 4.5: M365 Credentials**
+For M365, Prowler App uses a service principal application with user and password to authenticate, for more information about the requirements needed for this provider check this [section](../getting-started/requirements.md#microsoft-365). Also, the detailed steps of how to add this provider to Prowler Cloud and start using it are [here](./microsoft365/getting-started-m365.md).
+
+<img src="../../img/m365-credentials.png" alt="M365 Credentials" width="700"/>
+
+---
+
 ## **Step 5: Test Connection**
 After adding your credentials of your cloud account, click the `Launch` button to verify that the Prowler App can successfully connect to your provider: