Step 1: Access Azure Portal

1. Go to https://portal.azure.com/#home
2. Click on App Registration under Azure services

---

Step 2: Create New Registration

1. Click on + New Registration

---

Step 3: Configure Application

1. Provide a Name for the Application (e.g., "Leena AI Integration")
2. Under Supported account types, select "Accounts in this organisational directory only"
3. Click Register

---

Step 4: Copy Tenant ID and Client ID

1. After registration, you'll be taken to the application Overview page
2. Locate and copy the following values:
   • Application (client) ID
   • Directory (tenant) ID
3. Share these with Leena AI

---

Step 5: Create Client Secret

1. In the left navigation menu, click on Certificates & secrets
2. Select the Client secrets tab
3. Click on + New client secret

4. In the popup dialog:

• Add a Description (e.g., "Leena AI Secret")
• Set Expires to 24 months

5. Click Add

6. Important: Copy the Secret Value immediately (it will only be shown once)
7. Share this secret value securely with Leena AI

---

Step 6: Configure API Permissions

1. In the left navigation menu, click on API permissions
2. Click + Add a permission
3. Select Microsoft Graph

Delegated Permissions

1. Click on Delegated permissions
2. Search for "User" and select:
   • User.Read - Sign in and read user profile
3. Click Add permissions

Application Permissions

1. Click + Add a permission again
2. Select Microsoft Graph
3. Click on Application permissions
4. Search for "User" and select the following:
   • User.Read.All - Read all users' full profiles
   • User.Export.All - Export user's data

---

Step 7: Grant Admin Consent

1. After adding all permissions, click Grant admin consent for [Your Organization]
2. Confirm by clicking Yes
3. Verify that all permissions show a green checkmark under "Status"

---

Step 8: Share Credentials with Leena AI

Please share the following information securely with your Leena AI representative:

For UAT/Testing (Optional)

If testing with a specific group of users, also provide:

• Group ID: The ID of the Azure AD group containing test members
• Additional Permission: Add GroupMember.Read.All under Application Permissions

---

Summary of Required Permissions