Understand License Requirements

This article details the requirements to integrate your Microsoft security product with Red Canary.

Note: For more information on all of the licensed Microsoft features, see Microsoft 365 Licensing.

Red Canary offers two methods for granting access to your environment depending on your Entra ID license type.

Entra ID P1

Red Canary access is granted via a service account. Please refer to Entra ID P1 License - Grant Red Canary Read-Only Access to Microsoft Defender for detailed instructions.

Entra ID P2

Red Canary access is granted through Entra ID Identity Governance. Please refer to Integrate Microsoft Defender for Endpoint with Red Canary for detailed instructions.

Red Canary alert ingestion requirements

Supported alert sources

• Entra ID Identity Protection

• Microsoft 365 Defender

• Microsoft Defender for Cloud Apps

• Microsoft Defender for Endpoint

• Microsoft Defender for Identity

• Microsoft Defender for Office 365

Required Microsoft licenses

Red Canary Microsoft Sentinel integration requirements

Required Microsoft licenses

For more information, see Pre-deployment activities and prerequisites for deploying Microsoft Sentinel.