From 3dfcbf37bc5d22194398438e8dca68c9de1b3029 Mon Sep 17 00:00:00 2001 From: omerhaimov Date: Sun, 14 Nov 2021 18:47:48 +0200 Subject: [PATCH 1/5] Add office IRM --- .../2021-09-01-preview/dataConnectors.json | 61 +++++++++++++++++++ .../CheckRequirementsOfficeIRM.json | 23 +++++++ ...GetMicrosoftInsiderRiskManagementById.json | 29 +++++++++ 3 files changed, 113 insertions(+) create mode 100644 specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/dataConnectors/CheckRequirementsOfficeIRM.json create mode 100644 specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/dataConnectors/GetMicrosoftInsiderRiskManagementById.json diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json index 999869d0ad57..5245c76069d9 100644 --- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json +++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json @@ -118,6 +118,9 @@ "Get a Office ATP data connector": { "$ref": "./examples/dataConnectors/GetOffice365AdvancedThreatProtectionById.json" }, + "Get a Office IRM data connector": { + "$ref": "./examples/dataConnectors/GetMicrosoftInsiderRiskManagementById.json" + }, "Get a Dynamics365 data connector": { "$ref": "./examples/dataConnectors/GetDynamics365DataConnectorById.json" }, @@ -318,6 +321,9 @@ "Check requirements for OfficeATP.": { "$ref": "./examples/dataConnectors/CheckRequirementsOfficeATP.json" }, + "Check requirements for OfficeIRM.": { + "$ref": "./examples/dataConnectors/CheckRequirementsOfficeIRM.json" + }, "Check requirements for Dynamics365.": { "$ref": "./examples/dataConnectors/CheckRequirementsDynamics365.json" }, @@ -698,6 +704,32 @@ "description": "OfficeATP (Office 365 Advanced Threat Protection) requirements check properties.", "type": "object" }, + "OfficeIRMCheckRequirements": { + "allOf": [ + { + "$ref": "#/definitions/DataConnectorsCheckRequirements" + } + ], + "description": "Represents OfficeIRM (Microsoft Insider Risk Management) requirements check request.", + "properties": { + "properties": { + "$ref": "#/definitions/OfficeIRMCheckRequirementsProperties", + "description": "OfficeIRM (Microsoft Insider Risk Management) requirements check properties.", + "x-ms-client-flatten": true + } + }, + "type": "object", + "x-ms-discriminator-value": "OfficeIRM" + }, + "OfficeIRMCheckRequirementsProperties": { + "allOf": [ + { + "$ref": "#/definitions/DataConnectorTenantId" + } + ], + "description": "OfficeIRM (Microsoft Insider Risk Management) requirements check properties.", + "type": "object" + }, "TICheckRequirements": { "allOf": [ { @@ -1396,6 +1428,35 @@ "description": "OfficeATP (Office 365 Advanced Threat Protection) data connector properties.", "type": "object" }, + "OfficeIRMDataConnector": { + "allOf": [ + { + "$ref": "#/definitions/DataConnector" + } + ], + "description": "Represents OfficeIRM (Microsoft Insider Risk Management) data connector.", + "properties": { + "properties": { + "$ref": "#/definitions/OfficeIRMDataConnectorProperties", + "description": "OfficeIRM (Microsoft Insider Risk Management) data connector properties.", + "x-ms-client-flatten": true + } + }, + "type": "object", + "x-ms-discriminator-value": "OfficeIRM" + }, + "OfficeIRMDataConnectorProperties": { + "allOf": [ + { + "$ref": "#/definitions/DataConnectorTenantId" + }, + { + "$ref": "#/definitions/DataConnectorWithAlertsProperties" + } + ], + "description": "OfficeIRM (Microsoft Insider Risk Management) data connector properties.", + "type": "object" + }, "MDATPDataConnector": { "allOf": [ { diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/dataConnectors/CheckRequirementsOfficeIRM.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/dataConnectors/CheckRequirementsOfficeIRM.json new file mode 100644 index 000000000000..c0449a7f24f4 --- /dev/null +++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/dataConnectors/CheckRequirementsOfficeIRM.json @@ -0,0 +1,23 @@ +{ + "parameters": { + "api-version": "2021-09-01-preview", + "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0", + "resourceGroupName": "myRg", + "workspaceName": "myWorkspace", + "operationalInsightsResourceProvider": "Microsoft.OperationalInsights", + "DataConnectorsCheckRequirements": { + "kind": "OfficeIRM", + "properties": { + "tenantId": "2070ecc9-b4d5-4ae4-adaa-936fa1954fa8" + } + } + }, + "responses": { + "200": { + "body": { + "authorizationState": "Valid", + "licenseState": "Valid" + } + } + } +} diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/dataConnectors/GetMicrosoftInsiderRiskManagementById.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/dataConnectors/GetMicrosoftInsiderRiskManagementById.json new file mode 100644 index 000000000000..37c5cd7678c3 --- /dev/null +++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/dataConnectors/GetMicrosoftInsiderRiskManagementById.json @@ -0,0 +1,29 @@ +{ + "parameters": { + "api-version": "2021-09-01-preview", + "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0", + "resourceGroupName": "myRg", + "workspaceName": "myWorkspace", + "operationalInsightsResourceProvider": "Microsoft.OperationalInsights", + "dataConnectorId": "3d3e955e-33eb-401d-89a7-251c81ddd660" + }, + "responses": { + "200": { + "body": { + "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/dataConnectors/3d3e955e-33eb-401d-89a7-251c81ddd660", + "name": "3d3e955e-33eb-401d-89a7-251c81ddd660", + "type": "Microsoft.SecurityInsights/dataConnectors", + "kind": "OfficeIRM", + "etag": "\"0300bf09-0000-0000-0000-5c37296e0000\"", + "properties": { + "tenantId": "2070ecc9-b4d5-4ae4-adaa-936fa1954fa8", + "dataTypes": { + "alerts": { + "state": "Enabled" + } + } + } + } + } + } +} From 451d7cb2eec57881e54a1b14b86da506c1353f93 Mon Sep 17 00:00:00 2001 From: omerhaimov Date: Tue, 16 Nov 2021 13:54:55 +0200 Subject: [PATCH 2/5] fix --- .../preview/2021-09-01-preview/dataConnectors.json | 1 + 1 file changed, 1 insertion(+) diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json index 5245c76069d9..0b5ff7bc80d1 100644 --- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json +++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json @@ -1200,6 +1200,7 @@ "ThreatIntelligenceTaxii", "Office365", "OfficeATP", + "OfficeIRM", "AmazonWebServicesCloudTrail", "AmazonWebServicesS3", "AzureAdvancedThreatProtection", From a3416cd9ff93fd5d9fd783e66321b855d4aac26b Mon Sep 17 00:00:00 2001 From: omerhaimov Date: Tue, 16 Nov 2021 14:07:20 +0200 Subject: [PATCH 3/5] fix --- .../preview/2021-09-01-preview/dataConnectors.json | 3 +++ 1 file changed, 3 insertions(+) diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json index 0b5ff7bc80d1..220b3cf9a963 100644 --- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json +++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json @@ -1236,6 +1236,9 @@ { "value": "OfficeATP" }, + { + "value": "OfficeIRM" + }, { "value": "AmazonWebServicesCloudTrail" }, From fdd8add5e625eca03e349c727762a6f2a9bffdb5 Mon Sep 17 00:00:00 2001 From: omerhaimov Date: Tue, 16 Nov 2021 15:35:04 +0200 Subject: [PATCH 4/5] fix --- .../preview/2021-09-01-preview/dataConnectors.json | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json index 220b3cf9a963..7c61952d57d7 100644 --- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json +++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json @@ -481,7 +481,8 @@ "properties": { "kind": { "$ref": "#/definitions/DataConnectorKind", - "description": "Describes the kind of connector to be checked." + "description": "Describes the kind of connector to be checked.", + "type": "object" } }, "discriminator": "kind", @@ -1154,7 +1155,8 @@ "properties": { "kind": { "$ref": "#/definitions/DataConnectorKind", - "description": "The data connector kind" + "description": "The data connector kind", + "type": "string" } }, "type": "object" From ca7563051f3a567f45eb4d2c351d82f224d37262 Mon Sep 17 00:00:00 2001 From: omerhaimov Date: Tue, 16 Nov 2021 15:45:51 +0200 Subject: [PATCH 5/5] fix --- .../preview/2021-09-01-preview/dataConnectors.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json index 7c61952d57d7..ce60e7242802 100644 --- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json +++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json @@ -482,7 +482,7 @@ "kind": { "$ref": "#/definitions/DataConnectorKind", "description": "Describes the kind of connector to be checked.", - "type": "object" + "type": "string" } }, "discriminator": "kind",