prowler/docs/user-guide/providers/microsoft365/getting-started-m365.mdx

---
title: 'Getting Started With Microsoft 365 on Prowler'
---

<Note>
**Government Cloud Support**

Government cloud accounts or tenants (Microsoft 365 Government) are currently unsupported, but we expect to add support for them in the near future.

</Note>
## Prerequisites

Configure authentication for Microsoft 365 by following the [Microsoft 365 Authentication](/user-guide/providers/microsoft365/authentication) guide. This includes:

- Creating a Service Principal Application
- Granting required Microsoft Graph API permissions
- Setting up PowerShell module permissions (for full security coverage)

## Prowler App

### Step 1: Obtain Domain ID

1. Go to the Entra ID portal, then search for "Domain" or go to Identity > Settings > Domain Names

    ![Search Domain Names](/images/providers/search-domain-names.png)

    ![Custom Domain Names](/images/providers/custom-domain-names.png)

2. Select the domain to use as unique identifier for the Microsoft 365 account in Prowler App

### Step 2: Access Prowler App

1. Go to [Prowler Cloud](https://cloud.prowler.com/) or launch [Prowler App](/user-guide/tutorials/prowler-app)
2. Navigate to "Configuration" > "Cloud Providers"

    ![Cloud Providers Page](/images/prowler-app/cloud-providers-page.png)

3. Click on "Add Cloud Provider"

    ![Add a Cloud Provider](/images/prowler-app/add-cloud-provider.png)

4. Select "Microsoft 365"

    ![Select Microsoft 365](/images/providers/select-m365-prowler-cloud.png)

5. Add the Domain ID and an optional alias, then click "Next"

    ![Add Domain ID](/images/providers/add-domain-id.png)

### Step 3: Add Credentials to Prowler App

1. Go to App Registration overview and copy the Client ID and Tenant ID

    ![App Overview](/images/providers/app-overview.png)

2. Go to Prowler App and paste:

    - Client ID
    - Tenant ID
    - `AZURE_CLIENT_SECRET` from the Service Principal setup

    ![Prowler Cloud M365 Credentials](/images/providers/m365-credentials.png)

3. Click "Next"

    ![Next Detail](/images/providers/click-next-m365.png)

4. Click "Launch Scan"

    ![Launch Scan M365](/images/providers/launch-scan.png)

---

## Prowler CLI

Use Prowler CLI to scan Microsoft 365 environments.

### PowerShell Requirements

PowerShell 7.4+ is required for comprehensive Microsoft 365 security coverage. Installation instructions are available in the [Authentication guide](/user-guide/providers/microsoft365/authentication#supported-powershell-versions).

### Authentication Options

Select an authentication method from the [Microsoft 365 Authentication](/user-guide/providers/microsoft365/authentication) guide:

- **Service Principal Application** (recommended): `--sp-env-auth`
- **Interactive Browser Authentication**: `--browser-auth`

### Basic Usage

After configuring authentication, run a basic scan:

```console
prowler m365 --sp-env-auth
```

For comprehensive scans including PowerShell checks:

```console
prowler m365 --sp-env-auth --init-modules
```

---