API connector in Defender for Cloud Apps that brings in Microsoft 365 activity, allowing related incidents and alerts to show up in the Defender portal.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Microsoft 365 app connector in context, with comparison tables and the common traps.
Terms in this definition
- API
Short for application programming interface: a contract that client code calls programmatically, for example a web API secured with tokens or the Files, Images or Responses APIs.
- Microsoft 365
Formerly Office 365, Microsoft's software-as-a-service productivity suite. A Microsoft Entra tenant provides its identity, and its data is not governed by Azure RBAC.
- RELATED
Fetches a column value from the lookup table, that is the one side of a many-to-one relationship, for whichever row is being evaluated. It therefore needs to run inside an iterator or a calculated column, where row context exists.
Related terms
- Defender security for AI agents
Set up in the Defender portal by connecting Copilot Studio and the Microsoft 365 app connector, which share one Entra App ID. Agent tool calls are then checked at run time, risky ones blocked, and alerts and incidents raised.