Add office IRM Connector (#16764)

* Add office IRM * fix * fix * fix * fix Co-authored-by: omerhaimov <omer.haimovich@gmail.com>
Azure · Nov 19, 2021 · 554bc20 · 554bc20
1 parent c8a145b
commit 554bc20
Show file tree

Hide file tree

Showing 3 changed files with 121 additions and 2 deletions.
diff --git a/...esource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json b/...esource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json
@@ -118,6 +118,9 @@
           "Get a Office ATP data connector": {
             "$ref": "./examples/dataConnectors/GetOffice365AdvancedThreatProtectionById.json"
           },
+          "Get a Office IRM data connector": {
+            "$ref": "./examples/dataConnectors/GetMicrosoftInsiderRiskManagementById.json"
+          },
           "Get a Dynamics365 data connector": {
             "$ref": "./examples/dataConnectors/GetDynamics365DataConnectorById.json"
           },
@@ -420,6 +423,9 @@
           "Check requirements for OfficeATP.": {
             "$ref": "./examples/dataConnectors/CheckRequirementsOfficeATP.json"
           },
+          "Check requirements for OfficeIRM.": {
+            "$ref": "./examples/dataConnectors/CheckRequirementsOfficeIRM.json"
+          },
           "Check requirements for Dynamics365.": {
             "$ref": "./examples/dataConnectors/CheckRequirementsDynamics365.json"
           },
@@ -577,7 +583,8 @@
       "properties": {
         "kind": {
           "$ref": "#/definitions/DataConnectorKind",
-          "description": "Describes the kind of connector to be checked."
+          "description": "Describes the kind of connector to be checked.",
+          "type": "string"
         }
       },
       "discriminator": "kind",
@@ -800,6 +807,32 @@
       "description": "OfficeATP (Office 365 Advanced Threat Protection) requirements check properties.",
       "type": "object"
     },
+    "OfficeIRMCheckRequirements": {
+      "allOf": [
+        {
+          "$ref": "#/definitions/DataConnectorsCheckRequirements"
+        }
+      ],
+      "description": "Represents OfficeIRM (Microsoft Insider Risk Management) requirements check request.",
+      "properties": {
+        "properties": {
+          "$ref": "#/definitions/OfficeIRMCheckRequirementsProperties",
+          "description": "OfficeIRM (Microsoft Insider Risk Management) requirements check properties.",
+          "x-ms-client-flatten": true
+        }
+      },
+      "type": "object",
+      "x-ms-discriminator-value": "OfficeIRM"
+    },
+    "OfficeIRMCheckRequirementsProperties": {
+      "allOf": [
+        {
+          "$ref": "#/definitions/DataConnectorTenantId"
+        }
+      ],
+      "description": "OfficeIRM (Microsoft Insider Risk Management) requirements check properties.",
+      "type": "object"
+    },
     "TICheckRequirements": {
       "allOf": [
         {
@@ -1224,7 +1257,8 @@
       "properties": {
         "kind": {
           "$ref": "#/definitions/DataConnectorKind",
-          "description": "The data connector kind"
+          "description": "The data connector kind",
+          "type": "string"
         }
       },
       "type": "object"
@@ -1270,6 +1304,7 @@
         "ThreatIntelligenceTaxii",
         "Office365",
         "OfficeATP",
+        "OfficeIRM",
         "AmazonWebServicesCloudTrail",
         "AmazonWebServicesS3",
         "AzureAdvancedThreatProtection",
@@ -1306,6 +1341,9 @@
           {
             "value": "OfficeATP"
           },
+          {
+            "value": "OfficeIRM"
+          },
           {
             "value": "AmazonWebServicesCloudTrail"
           },
@@ -1502,6 +1540,35 @@
       "description": "OfficeATP (Office 365 Advanced Threat Protection) data connector properties.",
       "type": "object"
     },
+    "OfficeIRMDataConnector": {
+      "allOf": [
+        {
+          "$ref": "#/definitions/DataConnector"
+        }
+      ],
+      "description": "Represents OfficeIRM (Microsoft Insider Risk Management) data connector.",
+      "properties": {
+        "properties": {
+          "$ref": "#/definitions/OfficeIRMDataConnectorProperties",
+          "description": "OfficeIRM (Microsoft Insider Risk Management) data connector properties.",
+          "x-ms-client-flatten": true
+        }
+      },
+      "type": "object",
+      "x-ms-discriminator-value": "OfficeIRM"
+    },
+    "OfficeIRMDataConnectorProperties": {
+      "allOf": [
+        {
+          "$ref": "#/definitions/DataConnectorTenantId"
+        },
+        {
+          "$ref": "#/definitions/DataConnectorWithAlertsProperties"
+        }
+      ],
+      "description": "OfficeIRM (Microsoft Insider Risk Management) data connector properties.",
+      "type": "object"
+    },
     "MDATPDataConnector": {
       "allOf": [
         {

diff --git a/...sights/preview/2021-09-01-preview/examples/dataConnectors/CheckRequirementsOfficeIRM.json b/...sights/preview/2021-09-01-preview/examples/dataConnectors/CheckRequirementsOfficeIRM.json
@@ -0,0 +1,23 @@
+{
+  "parameters": {
+    "api-version": "2021-09-01-preview",
+    "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
+    "resourceGroupName": "myRg",
+    "workspaceName": "myWorkspace",
+    "operationalInsightsResourceProvider": "Microsoft.OperationalInsights",
+    "DataConnectorsCheckRequirements": {
+      "kind": "OfficeIRM",
+      "properties": {
+        "tenantId": "2070ecc9-b4d5-4ae4-adaa-936fa1954fa8"
+      }
+    }
+  },
+  "responses": {
+    "200": {
+      "body": {
+        "authorizationState": "Valid",
+        "licenseState": "Valid"
+      }
+    }
+  }
+}
diff --git a/...iew/2021-09-01-preview/examples/dataConnectors/GetMicrosoftInsiderRiskManagementById.json b/...iew/2021-09-01-preview/examples/dataConnectors/GetMicrosoftInsiderRiskManagementById.json
@@ -0,0 +1,29 @@
+{
+  "parameters": {
+    "api-version": "2021-09-01-preview",
+    "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
+    "resourceGroupName": "myRg",
+    "workspaceName": "myWorkspace",
+    "operationalInsightsResourceProvider": "Microsoft.OperationalInsights",
+    "dataConnectorId": "3d3e955e-33eb-401d-89a7-251c81ddd660"
+  },
+  "responses": {
+    "200": {
+      "body": {
+        "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/dataConnectors/3d3e955e-33eb-401d-89a7-251c81ddd660",
+        "name": "3d3e955e-33eb-401d-89a7-251c81ddd660",
+        "type": "Microsoft.SecurityInsights/dataConnectors",
+        "kind": "OfficeIRM",
+        "etag": "\"0300bf09-0000-0000-0000-5c37296e0000\"",
+        "properties": {
+          "tenantId": "2070ecc9-b4d5-4ae4-adaa-936fa1954fa8",
+          "dataTypes": {
+            "alerts": {
+              "state": "Enabled"
+            }
+          }
+        }
+      }
+    }
+  }
+}