Search documentation

Purpose The Microsoft 365 / Entra ID integration is the primary identity evidence source in AssurIQ. It powers privileged…

…ce risk score, vulnerability, EDR alert and onboarding status via the Microsoft Graph Security API, feeding endpoint vulnerability and detection controls alongside the Microsoft 36…

…access for configuration and patch compliance evidence, where used Permissions Reader role at subscription or management group scope — read all resource configuration Log Anal…

Overview Permission matrix by role and how it is enforced server-side. Documentation status This article is a concise reference. A fully expanded guide for…

Overview Device → User → Identity provider → Cloud app → Data; conditional access expectations and how untrusted-device sessions are surfaced. Documentation…

…gle as their identity provider, feeding the same identity controls as Microsoft 365. Requirements Google Workspace domain with Super Admin access to authorize the connector A G…

…ken Network reachability from the collector to the management plane Permissions SNMPv3 authPriv user for on-prem switches and controllers Read-only SSH account for configuratio…

…ulnerability) module licensed if vulnerability evidence is required Permissions Hosts: Read — device inventory and sensor health Detections: Read — endpoint detections and seve…

…from the AssurIQ Cloud Connector to the RMM platform's API endpoint Permissions Read-only API scope covering device inventory, OS and patch status Read access to monitoring ale…

…ity from the collector to at least one domain controller per domain Permissions Domain user account with default Domain Users read rights (no elevated group membership required…

Overview Agentless collection for Microsoft 365, Azure, AWS and Google Workspace. Documentation status This article is a concise reference. A…

Raw observations to derived graph Collectors upload raw, timestamped observation records — interfaces, VLANs, IP addresses, routes, LLDP/CDP neighbors, forwar…

Overview Scoped, read-only, time-limited access for assessors. Documentation status This article is a concise reference. A fully expanded guide for “Auditor…

Overview Inviting users and assigning platform, partner, client and auditor roles. Documentation status This article is a concise reference. A fully expande…

Overview Client administrator and executive portals. Documentation status This article is a concise reference. A fully expanded guide for “Customer Access”…

…not exposed to the internet, or explicitly accepted as an exception Permissions Administrator with a custom profile granting Read-Only access to Firewall, VPN, Network and Log…

…y read scopes A mapping between PSA companies and AssurIQ customers Permissions Ticket: Read/Write — create and update tickets for remediation items Company/Client: Read — matc…

Overview ARP, ICMP, SNMP, LLDP/CDP and DHCP seeding; scopes and schedules. Documentation status This article is a concise reference. A fully expanded guide…

Overview How AssurIQ assesses business-owned iOS, iPadOS and Android devices: trust states, posture signals, cloud access graph and what each platform can act…

Overview Authenticated and unauthenticated scans, scopes, schedules and safe defaults. Documentation status This article is a concise reference. A fully exp…

Overview The v0.1 collector talks to three POST, JSON, snake_case endpoints under /api/v1/collectors. On deployments where the main site is access-restricted,…

…role HTTPS (443) reachability from the collector to the controller Permissions Controller account with the Viewer (read-only) administrator role API access enabled on the cont…

…d (or privilege-level 1 with limited show commands) account for SSH Permissions SNMPv3 user with authPriv (SHA + AES) for polling interface, CPU and inventory data SSH account…

…s Outbound HTTPS to api.meraki.com from the AssurIQ Cloud Connector Permissions Dashboard administrator with the Read-only organization role API key scoped to that read-only ad…

…r interface and system metrics, or API-only polling where supported Permissions Administrator with the Auditor/Read-Only privilege level API key or credential scoped to that ac…

…hability from the collector to the management interface or Panorama Permissions Custom admin role with Read-Only access to Policies, Objects, Network and Device tabs API key ge…

…reachability from the collector to the pfSense management interface Permissions API user assigned a privilege set restricted to read-only diagnostic and status pages SNMP commu…

…TTPS from the AssurIQ Cloud Connector to the management console URL Permissions Viewer role — read agent inventory, health and configuration Read access to Threats/Incidents fo…

…or Security Hub enabled, optionally, for richer compliance evidence Permissions A managed policy equivalent to ReadOnlyAccess, or a scoped policy covering ec2:Describe*, iam:Ge…

…Directory Assessment A read-only service account with directory-read permissions; no write or reset rights Local Evidence Collection Read access to the specific artifacts the modu…