Introducing Tachyon Platform
Implementing Tachyon Platform
Using consumer applications
- Settings Features
Enable PowerShell to connect to Azure via MSOL
On the Tachyon server where the Office 365 connector will be executed, PowerShell needs to connect to Azure via MSOL, which requires the following two modules to be installed:
If the following warnings are shown when installing a module, you will need to run the below command first.
WARNING: Unable to download from URI 'https://go.microsoft.com/fwlink/?LinkID=627338&clcid=0x409' to ''.
WARNING: Unable to download the list of available providers. Check your internet connection.
Prepare an AAD application
In your Azure Active Directory console, go to the Enterprise applications node and click New application.
You need to create a non-gallery application, in the version of AAD we're using this is done by clicking the Create your own application button.
Provide a name for the application. The name of application is not significant however it should be such that it suggests that the application is related to the Office 365 connector, for example: Tachyon O365 Connector. In this version of AAD we ensure that the Integrate any other application you don't find in the gallery (Non-gallery) option is selected and then click Create in the bottom left of the panel.
In the Overview tab for the new application, copy the Application ID value as this will be required for the connector.
Navigate back to the AAD blade then click the App registrations node of AAD.
Click on the application name for the new application.
Click on the API permissions node under the Manage section, then click Add a permission .
Click on the Microsoft Graph tile and then click on Application permissions.
A long list of API permissions will be shown, scroll through them and check as appropriate using the following table.
When the correct permissions have been selected, click Add permissions .
After they've been added the permissions should like the picture shown opposite.
Click Grant admin consent for <organization>, where <organization> is the Organization you set when your InTune instance was created. This means that as an administrator for your organization, you're consenting that the users of the application can use these permissions. Click Yes to confirm.
Add a client secret
Click on the Certificates & secrets node and then click on New client secret button
The Add a client secret form will open, add a description and select an expiry from the Expires radio buttons and then click Add.
Copy the new client secret value and save it as you won't be able to retrieve it after you perform another operation or leave this blade.
Add a user with the necessary permissions to run the PowerShell scriptsAn AAD user with global Reports Reader permissions must be made available in your organization's blade. The credentials for this user will be set in the Microsoft Office 365 connector when it is created in Tachyon.
Configuring the Office 365 connector
These instructions show how to create an Office 365 connector in the Tachyon Settings application.
Adding, testing and running an Office 365 connector
These are the steps to add, test and run an Office 365 connector
Adding an Office 365 connector
In the Tachyon portal, navigate to Settings→Configuration→Connectors.
Click on the Add button.
- In the Add connector popup select the Intune type.
In Connector name, enter a logical name for this connector. In our example we choose the name Microsoft Office 365 Inventory .
Azure Cloud Instance can be set to the URL for your InTune implementation. If you leave this field blank AzurePublic is used as a default.
- In Azure Tenant Id, enter your Azure tenant ID, available in the Overview node of your AAD console
- Client Id this should be set to your registered application clientID.
Client Secret this should be set to the specific client secret value that has been created for your chosen Enterprise Application
- Login Email - set this to the permissioned user.
- Login Password - set this to the password for the permissioned user.
The new connector has now been added and a new action that can be used to run the connector has been created in the background, called Sync Data - Microsoft Office 365 Inventory.
Testing an Office 365 connector
- Select the Office 365 connector by checking the box at the left-hand end of its entry in the Connectors table.
- Click the Test button.
- The Test status column for the connector will display a clock icon indicating that the test has been queued for executing.
- If the test succeeds Test status will display a check icon , and the Last tested column will display the date and time the test succeeded.
- If the test fails the Test status will display a failed icon , and you'll need to check the details you entered for the connector.
- If the test succeeds you can proceed to run the connector to populate an inventory repository.
Running an Office 365 connector
- Click the Execute button.
- In the Execute action popup subsequently displayed, use the Repository menu to select the inventory repository you want to populate.
- Once the repository has been selected you can then select the action to run. In the case of inventory repositories the actions will be restricted to inventory related actions. For a connector you will be looking for an action with the form Sync Data - <connector name>.
- Select whether you want to clear any existing data in the repository by checking the Clean sync checkbox.
- Click Execute button in the Execute action popup to start the sync.
- When the sync starts a number of actions are queued to be performed on the selected repository. To check the progress of the sync actions:
- Navigate to the Monitoring→Process log page.
- Here you can see the sequence of actions that have been queued for the selected repository related to the Sync Data action selected.
- When each action has finished running you'll see a check icon appear in the Status column if it succeeds or a failed icon if it fails.
Viewing the Office 365 information in the Inventory application
- Use the Switch app menu to open the Inventory application.
- Navigate to Software Inventory→Product Usage page.
- On this page you should see software items that are coming from your AAD environment.