Overview:

In order to activate Guardz services, admins must install Guardz applications in their Microsoft environment. Some Security Controls (features) are enabled by installing the basic application (Guardz Detection), while others require the installation of additional applications. This article provides an overview of the different applications available for Microsoft and includes installation instructions.

Application Types & Installation Instructions:

1. Guardz Detection (ITDR Read Only)

Overview:

This is the primary application required to initiate Guardz basic monitoring. It is the same application that admins must install whenever a new customer is added (as well as to themselves once the MSP itself is onboarded)
Once the necessary permissions are granted, Guardz will monitor the user’s configuration—such as missing MFA, inactive accounts, and more—and will raise an alert whenever an issue is detected.
Activation must be done by a Licensed Global Administrator in the Microsoft 365 account

Installation of 'Guardz Detection' Application:

Navigate to the ‘Security Controls’ tab and open the ‘Identity Threat Detection & Response (ITDR)’ section
Click on 'Connect' / ‘Activate’

Review the information and click 'Install'
Choose the account to connect to Guardz

Review the 'Guardz Detection' permissions and make sure to grant them all

Click on ‘Accept’
To verify successful installation, make sure the status has changed to ‘Active’ (the process may take a couple of minutes)
You can also find the app on your Microsoft Azure account:
Azure portal > Enterprise applications > All Application

2. Guardz Response (ITDR Read & Write)

Overview:

This application enables the execution of remediation actions for detected ITDR incidents
Actively respond to risky activity and user-related threats by suspending a user or remediating an issue with an automated response
Activation must be done by a Licensed Global Administrator in the Microsoft 365 account

Installation of 'Guardz Data Protection'

Navigate to the ‘Security Controls’ tab and open the ‘Identity Threat Detection & Response (ITDR)’ section
Click on ‘Install Response App’

Review the information and click 'Install'

Choose the account to connect to Guardz

Review the permissions and make sure to grant them all
Click on ‘Accept’
To verify successful installation, make sure the status has changed to ‘Active’ (the process may take a couple of minutes)
You can also find the app on your Microsoft Azure account:
Azure portal > Enterprise applications > All Applications

3. Guardz Data Protection (OneDrive Integrations)

Overview:

This application enables our ‘Data Protection’ feature
Once the integration is in place, Guardz scans the customer’s files and folders and raise an alert when an External share or suspicious activity is detected
Activation must be done by a Licensed Global Administrator in the Microsoft 365 account

Installation of 'Guardz Data Protection'

Navigate to the ‘Security Controls’ tab and open the ‘Cloud Data Protection’ section
Click on the '+' sign
Choose the Microsoft 365 option and click 'Connect'
Review the information and click 'Install'

Choose the account to connect to Guardz

Review the permissions and make sure to grant them all
Click on ‘Accept’
To verify successful installation, make sure the status has changed to ‘Active’ (the process may take a couple of minutes)
You can also find the app on your Microsoft Azure account:
Azure portal > Enterprise applications > All Applications

4. Guardz Email Security (Email Protection)

Overview:

This application enables our ‘Email Protection’ feature
Guardz will scan your users' inboxes and raise issues when a risk is detected
Activation must be done by a Licensed Global Administrator in the Microsoft 365 account

Installation of 'Email Protection'

Navigate to the ‘Security Controls’ tab and open the ‘Email Protection’ section
Click on 'Activate'
Review the information and click 'Install'

Choose the account to connect to Guardz
Review the permissions and make sure to grant them all
Click on ‘Accept’
To verify successful installation, make sure the status has changed to ‘Active’ (the process may take a couple of minutes)
You can also find the app on your Microsoft Azure account:
Azure portal > Enterprise applications > All Applications