Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

Access monitoring Dynamics 365 - Sentinel

Copper Contributor


can you tell me what is the best way to integrate the access monitoring of crm dynamics 365 on sentinel?

Thank you.

3 Replies

Hello @Giulio22,


I assume that access to Dynamics 365 is performed based on a Microsoft user, and it means that you can see logs in Azure Active Directory -> Sign-in logs. If it is so, you should connect Azure Active Directory to Sentinel and filter logs by Application. Thereby you will be able to see who accesses Dynamic 365.

For example, by running this query:
| where AppDisplayName contains "Dynamics 365"


There is a Dynamics365 data connector as well as a Dynamics 365 Content hub solution (which I think would be your best bet)
It would be the best bet if this connector ingests SignIn activity logs.