Connection

These are shared by every section on this browser. Changing them takes effect on the next sign-in.

Entra app registration

One-time setup in the Microsoft Entra admin center. The signed-in user authenticates against this registration.

1. Create the registration. Microsoft Entra admin center → App registrations → New registration. Name it (e.g. "OmniView"), leave account types on the single-tenant default.
2. Add the redirect URI. Under the Single-page application (SPA) platform, add the exact address you serve OmniView from, ending in /login.html — for example https://cpslabnetwork.ddns.net/login.html.
3. Add delegated Graph permissions (API permissions → Add a permission → Microsoft Graph → Delegated):
   User.Read DeviceManagementManagedDevices.Read.All DeviceManagementConfiguration.Read.All DeviceManagementApps.Read.All DeviceManagementServiceConfig.Read.All DeviceManagementScripts.Read.All Reports.Read.All BitLockerKey.ReadBasic.All BitLockerKey.Read.All Organization.Read.All SecurityAlert.Read.All IdentityRiskyUser.Read.All IdentityRiskEvent.Read.All ServiceHealth.Read.All Policy.Read.All User.Read.All
4. Grant admin consent for the tenant (needs a Global/Intune admin), and confirm every permission shows a green tick.
5. Security section role requirement. The Security data (alerts, risky users, risky sign-ins) additionally requires the signed-in account to hold one of Security Reader, Security Operator, Security Administrator, or Global Reader in Entra — consent alone is not enough. Security Reader is the least-privileged option.
6. Copy the IDs. From the registration's Overview, copy the Application (client) ID and Directory (tenant) ID into the Connection panel on the left (or the sign-in page).