# Set Up Cloud Monitor (Automated)

Cloud Monitor monitors user activities, such as sharing or downloading files and links, on your organisation’s Microsoft 365 environment, including Exchange Online and SharePoint Online.

An **Azure Global Administrator** account is required to set up Cloud Monitor.

Cloud Monitor uses a registered Azure application and certificate-based authentication to securely access activity data from Microsoft 365. These data are then analysed within GuardWare INSIGHT to provide dashboards, alerts, and reports on cloud usage and potential security incidents.

It monitors key cloud events such as:

* Files accessed or downloaded from sensitive libraries
* Access and download actions by anonymous, invited, or mobile users
* Files accessed via links shared on Teams
* Creation of anonymous links and external file access activities
* SharePoint file access, download, and link creation activities
* Outgoing Microsoft 365 emails

**To set up Cloud Monitor:**

1. Log in to the GuardWare INSIGHT Management Console.
2. Click **Open Management Console**.

<div align="left"><figure><img src="/files/ea3fb6660abe6ae8a978a3eb3da82dc6214bcbfe" alt="" width="563"><figcaption></figcaption></figure></div>

3. Navigate to **Organisation** and click **Cloud Monitor Setup**.

<div align="left"><figure><img src="/files/9a9f7993a4236868bc58151211af2a580aa329c9" alt="" width="563"><figcaption></figcaption></figure></div>

4. Click **Setup**. You’ll be asked to sign in with a Microsoft account.
5. Sign in with your **Azure Global Administrator** account. Once authenticated, the system automatically performs all necessary Azure configurations, including:
   1. Registering the GuardWare Cloud Monitoring Application in Azure
   2. Generating and uploading the required **certificates**
   3. Assigning the appropriate **permissions** and **roles**
   4. Storing the credentials (Client ID, Tenant ID, Domain, and Certificate details) securely in the database
6. After the application is registered, click **Next**. You’ll be asked to sign in again.\
   The first sign-in registers the application in Azure, and the second allows you to select the security group to monitor.\
   &#x20;

   <div align="left"><figure><img src="/files/b94aa3054bad922d86f65ead14730de9e218bc22" alt="" width="375"><figcaption></figcaption></figure></div>
7. Select a Security Group you want Cloud Monitor to monitor and click **Save**. You can update or change this group later if needed.\
   &#x20;

   <div align="left"><figure><img src="/files/dbb38e4f506b89305ae3550abd820bf2c69d06f5" alt="" width="375"><figcaption></figcaption></figure></div>

Once the setup is complete, Cloud Monitor starts monitoring cloud activities, which are then displayed in INSIGHT dashboards, reports, and alerts.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.guardware.com/insight/guardware-insight/getting-started/set-up-cloud-monitor-automated.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.