Adding an M365 host

Overview

This guide walks you through adding a Microsoft 365 host in Netwatch using the Microsoft Graph API. Since this integration uses the API, no Watchnode or proxy is required.

Prerequisites

Before you begin, make sure you have the following values ready from your Azure App Registration:

Step 1 — Create a New Host

1. In Netwatch, navigate to Configuration → Hosts

2. Click Create host in the top-right corner

3. Fill in the Host name field (e.g. M365 - Your Organisation)

4. Under Host groups, either:

   • Select an existing group (e.g. Microsoft 365), or
   • Click Add new group and give it a meaningful name (e.g. Microsoft 365)
   

ℹ️ No interface is needed. Since this integration communicates via the Microsoft Graph API, you do not need to add a Watchnode or proxy.

Step 2 — Add the Required Macros

1. Go to the Macros tab on the host
2. Add the following three macros with their corresponding values:

{$MS.GRAPH.CLIENT.ID}      →  your-client-id
{$MS.GRAPH.CLIENT.SECRET}  →  your-client-secret
{$MS.GRAPH.TENANT.ID}      →  your-tenant-id

3. Click Add after each macro to confirm it

Step 3 — Link the Templates

1. Go to the Templates tab on the host
2. Search for and add each of the following templates:

• M365 disabled users discovery by Netwatch
• M365 license audit
• M365 mailbox discovery
• M365 mailbox size audit by Netwatch
• M365 onedrive discovery
• M365 send receive audit discovery

3. Click Select to confirm your template selections

Step 4 — Save the Host

1. Review all settings
2. Click Add (or Update if editing an existing host) to save

Step 5 — Wait for Data Collection

Once the host is saved, Netwatch will begin polling the Microsoft Graph API automatically. Allow a few minutes for the first data collection cycle to complete.

You can monitor progress under Monitoring → Latest data, filtering by your new host.

✅ No Watchnode or proxy configuration is needed — all communication is handled directly via the Microsoft Graph API.

Troubleshooting