Set up Microsoft Azure for the MS TVM integration

---
title: Set up Microsoft Azure for the MS TVM integration
description: Set up your account in the Microsoft Azure portal to access the Microsoft Threat and Vulnerability Management \(MS TVM\) API remotely. You need this account to access the MS TVM tenant to gather information for machines, vulnerabilities, and security recommendations.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/vulnerability-response/mstvm-azure-account.html
release: brazil
product: Vulnerability Response
classification: vulnerability-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 2
breadcrumb: [Microsoft Threat and Vulnerability Management, Microsoft Defender Integration for Security Exposure Management, Vulnerability Response integrations, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Set up Microsoft Azure for the MS TVM integration

Set up your account in the Microsoft Azure portal to access the Microsoft Threat and Vulnerability Management \(MS TVM\) API remotely. You need this account to access the MS TVM tenant to gather information for machines, vulnerabilities, and security recommendations.

## Before you begin

Role required: Microsoft Azure portal administrator

## About this task

Complete the following setup tasks in your Microsoft Azure portal before you activate the ServiceNow® application for this integration.

To verify that you have access to the most current content, see the [Microsoft documentation](https://docs.microsoft.com) website. If you have not created an application ID for OAuth 2.0 authentication in the Microsoft Azure portal, follow the steps in this procedure.

## Procedure

1.  Log in to the Microsoft Azure portal using your Azure portal administrator credentials.

2.  In the left navigation panel on the Home pane, select **Azure Active Directory**.

3.  In the Overview pane, select **App Registrations \(Preview\)**.

4.  In the App registrations \(Preview\) pane, select **New Registration**.

    The Register an application form is displayed.

5.  Complete the fields on the form.

    |Field|Description|
    |-----|-----------|
    |**Name**|Name for the application. In this example, `ServiceNow MS TVM Integration` is entered.|
    |**Supported account types**|For this account, in Supported account types, select **Accounts in this organizational directory only \(ServiceNow only - Single tenant\)**.|
    |**Redirect URL \(optional\)**|If you enter a value in this field, the integration does not use it.|

6.  Select **Register**.

    The Application \(client\) ID and Directory \(tenant\) ID are created. Enter these values on the configuration page in the **Client ID** and **Tenant ID** fields during the configuration step in the ServiceNow VR-TVM integration Setup Assistant. This step is described in [Install and configure the Microsoft TVM integrations for Security Exposure Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response/mstvm-install-and-configure.md).

7.  When you see the Application \(client\) ID displayed in the ServiceNow MS TVM Integration pane, select **View API Permissions**.

8.  Navigate to **Request API permissions** > **APIs my organization uses**, and then select **Windows Defender ATP**.

9.  In the ServiceNow MS TVM Integration - API permissions pane, select **Add a Permission**.

10. Include access for the following roles.

    -   Machine.Read.All
    -   Machine.ReadWrite.All
    For more information see [Microsoft Defender for Endpoint products and services](https://learn.microsoft.com/en-us/defender-endpoint/api/get-machines#permissions).

11. Provide read access to machines, vulnerabilities, and security recommendations.\[Omitted image "mstvm-azure-config-permissions.jpg"\] Alt text: MS TVM Azure configured permissions.

12. Select **Grant Admin Consent for <your organization name>**.

    **Note:** To authenticate as an application from a ServiceNow instance, complete the following steps:

    1.  Navigate to **Servicenow MS TVM Integration** > **Certificates & Secrets**, and then select **New Client secret**.
    2.  Complete the fields on the form.

        |Field|Description|
        |-----|-----------|
        |**Description**|Name of the application.|
        |**Expires**|Date of expiry.|

    3.  Select **Add**.

        The **Value** field is populated with the new client secret, which is your new password.

        **Note:** You need this password when you configure the integration in your ServiceNow AI Platform instance. For more information, see [Install and configure the Microsoft TVM integrations for Security Exposure Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response/mstvm-install-and-configure.md).

    4.  Save this password in a secure location. After you leave this page, this password is not available.

        You have successfully created an application ID for authentication in the Microsoft Azure portal.


## What to do next

You're ready to set up your ServiceNow AI Platform® instance for the integration.