Search documentation

Purpose The Microsoft 365 / Entra ID integration is the primary identity evidence source in AssurIQ. It powers privileged…

…ce risk score, vulnerability, EDR alert and onboarding status via the Microsoft Graph Security API, feeding endpoint vulnerability and detection controls alongside the Microsoft 36…

…access for configuration and patch compliance evidence, where used Permissions Reader role at subscription or management group scope — read all resource configuration Log Anal…

…gle as their identity provider, feeding the same identity controls as Microsoft 365. Requirements Google Workspace domain with Super Admin access to authorize the connector A G…

…ken Network reachability from the collector to the management plane Permissions SNMPv3 authPriv user for on-prem switches and controllers Read-only SSH account for configuratio…

…ulnerability) module licensed if vulnerability evidence is required Permissions Hosts: Read — device inventory and sensor health Detections: Read — endpoint detections and seve…

…from the AssurIQ Cloud Connector to the RMM platform's API endpoint Permissions Read-only API scope covering device inventory, OS and patch status Read access to monitoring ale…

…ity from the collector to at least one domain controller per domain Permissions Domain user account with default Domain Users read rights (no elevated group membership required…

…not exposed to the internet, or explicitly accepted as an exception Permissions Administrator with a custom profile granting Read-Only access to Firewall, VPN, Network and Log…

…y read scopes A mapping between PSA companies and AssurIQ customers Permissions Ticket: Read/Write — create and update tickets for remediation items Company/Client: Read — matc…

…role HTTPS (443) reachability from the collector to the controller Permissions Controller account with the Viewer (read-only) administrator role API access enabled on the cont…

…d (or privilege-level 1 with limited show commands) account for SSH Permissions SNMPv3 user with authPriv (SHA + AES) for polling interface, CPU and inventory data SSH account…

…s Outbound HTTPS to api.meraki.com from the AssurIQ Cloud Connector Permissions Dashboard administrator with the Read-only organization role API key scoped to that read-only ad…

…r interface and system metrics, or API-only polling where supported Permissions Administrator with the Auditor/Read-Only privilege level API key or credential scoped to that ac…

…hability from the collector to the management interface or Panorama Permissions Custom admin role with Read-Only access to Policies, Objects, Network and Device tabs API key ge…

…reachability from the collector to the pfSense management interface Permissions API user assigned a privilege set restricted to read-only diagnostic and status pages SNMP commu…

…TTPS from the AssurIQ Cloud Connector to the management console URL Permissions Viewer role — read agent inventory, health and configuration Read access to Threats/Incidents fo…

…or Security Hub enabled, optionally, for richer compliance evidence Permissions A managed policy equivalent to ReadOnlyAccess, or a scoped policy covering ec2:Describe*, iam:Ge…