Install and configure Microsoft Defender for Cloud integrations for Security Exposure Management

---
title: Install and configure Microsoft Defender for Cloud integrations for Security Exposure Management
description: After you install and configure the Microsoft Defender Integration for Security Exposure Management, configure the Microsoft Defender for Cloud integrations.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/cc\_asc\_install\_configure.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 2
breadcrumb: [Microsoft Defender, Microsoft Defender Integration for Security Exposure Management, Vulnerability Response integrations, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Install and configure Microsoft Defender for Cloud integrations for Security Exposure Management

After you install and configure the Microsoft Defender Integration for Security Exposure Management, configure the Microsoft Defender for Cloud integrations.

## Before you begin

Create a new app registration on Azure Active Directory for the Microsoft Defender for Cloud Integration. For information on registering a new application on Azure Active Directory, see the [Microsoft product documentation](https://learn.microsoft.com/en-us/docs/) site. For information on Azure roles, see [Azure roles](https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles).

**Note:** The integrations support commercial cloud environments by default. If you require non-commercial support \(GCC High, DoD, etc.\) see the [Non-commercial configuration for Microsoft Defender Integration for Security Exposure Management](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3141167) Knowledge Base article \[KB3141167\] for more information.

-   The Microsoft Defender Integration for Security Exposure Management application bundles two independent integrations, each with its own configuration steps.
-   See [Install and configure the Microsoft TVM integrations for Security Exposure Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/mstvm-install-and-configure.md) to configure the Microsoft Threat and Vulnerability \(MS TVM\) Integrations with the Setup Assistant.
-   See the following installation steps if you have not already installed the Microsoft Defender Integration for Security Exposure Management application. If you have installed the application, proceed to step 4 for configuration.

Roles required:

-   admin for initial assignment of roles activating the application.
-   sn\_vul.vulnerability\_admin

## Procedure

1.  Navigate to **All** > **System Definition** > **Plugins**.

2.  In the search bar, enter `Microsoft Defender Integration for Security Exposure Management`.

3.  Select **Install**.

    Any dependencies that will be installed are displayed.

4.  Navigate to **All** > **Microsoft Defender Integration for USEM** > **Administration** > **Microsoft Defender for Cloud Configuration**.

5.  In the form, fill in the fields.

<table id="table_b5w_jy4_bkc"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

API URL

</td><td>

Resource URL of the instance.-   [https://management.azure.com](https://management.azure.com/) \(Azure public cloud\)
-   [http://management.usgovcloudapi.net](http://management.usgovcloudapi.net) \(US Government GCC High/DoD\)


</td></tr><tr><td>

Tenant ID

</td><td>

Tenant identity of your organization.

</td></tr><tr><td>

Integration instance

</td><td>

Default instance. You can also create an instance for bringing the data from multiple Microsoft Defender tenants or subscriptions.

</td></tr><tr><td>

Client ID

</td><td>

Client identity that is generated after the Microsoft Defender for Cloud Integration application is registered.

</td></tr><tr><td>

Client secret

</td><td>

Client secret that is generated after the Microsoft Defender for Cloud Integration application is registered.

</td></tr><tr><td>

Import Findings from

</td><td>

Resources and assessments that correspond to the selected management group IDs and subscription IDs to be retrieved.

</td></tr><tr><td>

Management Group

</td><td>

Resources and assessments that correspond to the management Group IDs to be retrieved.**Note:** This field appears only when you select **Specific Management Groups** from the **Import Findings from** field.

</td></tr><tr><td>

Subscription ID

</td><td>

Identification numbers of the subscriptions for which the resources and assessments are to be retrieved.**Note:** This field appears only when you select **Specific Subscriptions** from the **Import Findings from** field.

</td></tr><tr><td>

Validation status

</td><td>

Whether the credentials and subscription ID that are provided are valid.

</td></tr></tbody>
</table>6.  Select **Save and test**.