Search documentation

Overview Device → User → Identity provider → Cloud app → Data; conditional access expectations and how untrusted-device sessions are surfaced. Documentat…

…atus This article is a concise reference. A fully expanded guide for “Cloud Connector” is scheduled in the documentation roadmap; the steps below are accurate for the current produ…

…carry WAN, VLAN and collector assignments. Create one per physical or cloud location. Documentation status This article is a concise reference. A fully expanded guide for “Add a…

…owned iOS, iPadOS and Android devices: trust states, posture signals, cloud access graph and what each platform can actually enforce. Documentation status This article is a conci…

…ual machines, network security groups and public IP exposure, feeding cloud asset, patching and attack-surface controls. Requirements An Azure subscription with Entra ID app re…

…ce domain with Super Admin access to authorize the connector A Google Cloud project with domain-wide delegation enabled for the AssurIQ service account Outbound HTTPS to googleapis…

…v3 enabled on AOS-CX/AOS-Switch devices and SSH for config backup For cloud-managed: an Aruba Central account with a read-only API token Network reachability from the collector to…

Purpose The AWS connector assumes a read-only cross-account IAM role to inventory EC2 instances, security groups, IAM configuration and public exposure across…

…UniFi Network Application 7.x+ or a UniFi OS Console (Dream Machine/Cloud Key) reachable from the collector A local admin account with read-only role, or the built-in Viewer role…

…rIQ In Integrations, add the Falcon API client and select the correct cloud region (US-1, US-2, EU-1, etc.). Verify collection Confirm host inventory and detections populate under…

…to graph.microsoft.com and login.microsoftonline.com from the AssurIQ Cloud Connector A decision on Conditional Access / Identity Protection licensing so unlicensed controls are ma…

…s, privileged group membership and legacy protocol exposure alongside cloud identity evidence. Requirements A domain-joined Windows host or the AssurIQ collector reachable to a…

…organization access Outbound HTTPS to api.meraki.com from the AssurIQ Cloud Connector Permissions Dashboard administrator with the Read-only organization role API key scoped to…

…coped to the relevant sites or groups Outbound HTTPS from the AssurIQ Cloud Connector to the management console URL Permissions Viewer role — read agent inventory, health and c…

…ent with read-only or reporting scope Outbound HTTPS from the AssurIQ Cloud Connector to the RMM platform's API endpoint Permissions Read-only API scope covering device invento…

…s (organization, sites, contacts, network, firewalls, VLANs, servers, cloud tenants, applications, vendors, licenses, contracts, runbooks, backup, DR, policies and custom types). E…