From 9550600392b83f16ddfc1fbb613c5372f07af6f8 Mon Sep 17 00:00:00 2001 From: dimav78 Date: Fri, 17 Oct 2025 17:15:03 +0100 Subject: [PATCH 1/2] Add Licensing Editions section to 1Secure documentation --- docs/1secure/index.md | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/docs/1secure/index.md b/docs/1secure/index.md index cae8bf51d6..9363d01fde 100644 --- a/docs/1secure/index.md +++ b/docs/1secure/index.md @@ -7,4 +7,14 @@ sidebar_position: 1 # Netwrix 1Secure Documentation Netwrix 1Secure is a simple SaaS application that helps you analyze both on-premises and cloud environments. The application collects data within the IT infrastructure and notifies you on any actions made to the organization. These actions may include account creation or deletion, changes to group memberships, changes to the organization, etc. -Netwrix 1Secure allows Managed Service Providers to generate a variety of reports to investigate incidents and suspicious activities across the IT environment. \ No newline at end of file +Netwrix 1Secure allows Managed Service Providers to generate a variety of reports to investigate incidents and suspicious activities across the IT environment. + +## Licensing Editions + +| Edition | Data Sources | Features | Target Audience | +|---------|--------------|-----------|-----------------| +| DSPM1 | Active Directory, Entra ID, Windows File Server, SharePoint Online, Exchange Online | | End users | +| DSPM3 | All in DSPM1 | | End users | +| ITDR1 | Active Directory, Entra ID, PingCastle | Advanced AD risk assessment | End users | +| MSP1 | All in DSPM1 + ITDR1 | | MSP Only | +| MSP3 | All in DSPM3 + ITDR1 | | MSP Only | From 2ade328e959402d71a5a10ad381c8239bb8d0182 Mon Sep 17 00:00:00 2001 From: dimav78 Date: Fri, 17 Oct 2025 17:26:37 +0100 Subject: [PATCH 2/2] Added DSPM and fixed minor inaccuracies --- docs/1secure/admin/datacollection/exchangeonline.md | 6 +++--- docs/1secure/admin/datacollection/overview.md | 4 ++-- docs/1secure/admin/datacollection/sharepointonline.md | 6 +++--- docs/1secure/configuration/computer/overview.md | 2 +- docs/1secure/configuration/registerconfig/registerconfig.md | 4 ++-- docs/1secure/index.md | 2 +- 6 files changed, 12 insertions(+), 12 deletions(-) diff --git a/docs/1secure/admin/datacollection/exchangeonline.md b/docs/1secure/admin/datacollection/exchangeonline.md index f19591ec76..ce99b46a7f 100644 --- a/docs/1secure/admin/datacollection/exchangeonline.md +++ b/docs/1secure/admin/datacollection/exchangeonline.md @@ -7,11 +7,11 @@ sidebar_position: 40 # Exchange Online Auditing Before adding an Exchange Online data source for your organization, plan for the account that will -be used for data collection. This account will be specified in the monitored item (Office 365 +be used for data collection. This account will be specified in the monitored item (Microsoft 365 tenant) settings. -Netwrix 1Secure will access the cloud-based Office 365 infrastructure using a dedicated Microsoft -Entra ID application, formerly Azure AD. This app should be created manually by user with +Netwrix 1Secure DSPM will access the cloud-based Microsoft 365 infrastructure using a dedicated Microsoft +Entra ID application. This app should be created manually by user with administrative role and assigned required permissions. See the [App Registration and Configuration in Microsoft Entra ID](/docs/1secure/configuration/registerconfig/registerconfig.md) topic for additional information. diff --git a/docs/1secure/admin/datacollection/overview.md b/docs/1secure/admin/datacollection/overview.md index 782980f04b..161d94572c 100644 --- a/docs/1secure/admin/datacollection/overview.md +++ b/docs/1secure/admin/datacollection/overview.md @@ -19,7 +19,7 @@ Currently, the following data sources are supported: | Data source | Provided connectors | Required rights and permissions: | | ----------------- | ------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------- | | Active Directory | Active Directory Activity Active Directory Logons | [Active Directory Auditing](/docs/1secure/admin/datacollection/activedirectoryauditing/activedirectoryauditing.md) [Logon Activity Auditing](/docs/1secure/admin/datacollection/logonactivity/overview.md) | -| Azure AD | Azure AD Activity Azure AD Logons | [Microsoft Entra ID Auditing](/docs/1secure/admin/datacollection/entraid.md) | +| Entra ID | Entra ID Activity and Logons | [Microsoft Entra ID Auditing](/docs/1secure/admin/datacollection/entraid.md) | | Computer | File Server Activity | [Computer Auditing](/docs/1secure/admin/datacollection/computer/overview.md) | | SharePoint Online | SharePoint Online Activity | [SharePoint Online Auditing](/docs/1secure/admin/datacollection/sharepointonline.md) | | Exchange Online | Exchange Online Activity | [Exchange Online Auditing](/docs/1secure/admin/datacollection/exchangeonline.md) | @@ -31,4 +31,4 @@ The Netwrix 1Secure data collection workflow is as follows: **Step 2 –** Install the agent. See the [Install Agent](docs\1secure\install\installagent.md) topic for additional information. -Once you have added the organization and selected the domain for collecting the data, Netwrix 1Secure starts collecting audit data from the managed Active Directory, Azure AD domain, a computer, an Exchange Online, or a SharePoint Online collection. \ No newline at end of file +Once you have added the organization and selected the domain for collecting the data, Netwrix 1Secure starts collecting audit data from the managed Active Directory, Azure AD domain, a computer, an Exchange Online, or a SharePoint Online collection. diff --git a/docs/1secure/admin/datacollection/sharepointonline.md b/docs/1secure/admin/datacollection/sharepointonline.md index c51dc39c47..43191fcbfd 100644 --- a/docs/1secure/admin/datacollection/sharepointonline.md +++ b/docs/1secure/admin/datacollection/sharepointonline.md @@ -6,14 +6,14 @@ sidebar_position: 30 # SharePoint Online Auditing -Netwrix 1Secure allows you to audit Office 365 organizations that have established modern +Netwrix 1Secure DSPM allows you to audit Office 365 organizations that have established modern authentication as their identity management approach, including support for [multi-factor authentication (MFA)](https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks). See the Microsoft [App Registration and Configuration in Microsoft Entra ID](/docs/1secure/configuration/registerconfig/registerconfig.md) article for additional information. -In this scenario, Netwrix 1Secure will access the cloud-based infrastructure via Microsoft Graph and +In this scenario, Netwrix 1Secure DSPM will access the cloud-based infrastructure via Microsoft Graph and other modern APIs, being authenticated through a pre-configured Microsoft Entra ID application, formerly Azure AD, with appropriate access permissions. So, you should register a Microsoft Entra ID app and provide its settings to Netwrix 1Securewhen adding a SharePoint Online data source. @@ -27,7 +27,7 @@ topic for additional information. ## Configure SharePoint Online Auditing -To collect audit data from your SharePoint Online and OneDrive for Business, Netwrix 1Secure uses a +To collect audit data from your SharePoint Online and OneDrive for Business, Netwrix 1Secure DSPM uses a dedicated Microsoft Entra ID application and leverages APIs access permissions granted to that app. To register this application and assign required permissions, an Azure AD account with an administrative role will be required: diff --git a/docs/1secure/configuration/computer/overview.md b/docs/1secure/configuration/computer/overview.md index 974a7adfcd..8248633610 100644 --- a/docs/1secure/configuration/computer/overview.md +++ b/docs/1secure/configuration/computer/overview.md @@ -7,7 +7,7 @@ sidebar_position: 40 # Prepare for Windows File Server Monitoring This topic provides the requirements, limitations, protocols, and other considerations necessary for -data collection from the computer while working with Netwrix 1Secure. +data collection from the computer while working with Netwrix 1Secure DSPM. ## Check requirements diff --git a/docs/1secure/configuration/registerconfig/registerconfig.md b/docs/1secure/configuration/registerconfig/registerconfig.md index d8713c9f97..09d666b73d 100644 --- a/docs/1secure/configuration/registerconfig/registerconfig.md +++ b/docs/1secure/configuration/registerconfig/registerconfig.md @@ -8,7 +8,7 @@ sidebar_position: 20 This topic explains how to configure an app in Microsoft Entra ID (formerly Azure AD) to audit Microsoft 365 data sources (SharePoint Online, Microsoft Entra ID, and Exchange Online) in Netwrix -1Secure using modern authentication. This app enables secure access to the Netwrix 1Secure +1Secure DSPM using modern authentication. This app enables secure access to the Netwrix 1Secure cloud-based infrastructure via Microsoft Graph and other modern APIs. You have to configure the app in Microsoft Entra ID once, as it can be used to audit multiple @@ -127,7 +127,7 @@ The API permissions are granted to the application. ## Assign Roles to the App The registered application must be assigned to the Global Administrator or Exchange Administrator -role for Microsoft Entra ID state collection. +role for Microsoft Entra ID state collection. Follow the steps to assign role(s) to an application. **Step 1 –** Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/). diff --git a/docs/1secure/index.md b/docs/1secure/index.md index 9363d01fde..23827c0c18 100644 --- a/docs/1secure/index.md +++ b/docs/1secure/index.md @@ -13,7 +13,7 @@ Netwrix 1Secure allows Managed Service Providers to generate a variety of report | Edition | Data Sources | Features | Target Audience | |---------|--------------|-----------|-----------------| -| DSPM1 | Active Directory, Entra ID, Windows File Server, SharePoint Online, Exchange Online | | End users | +| DSPM1 | Active Directory, Entra ID, Windows File Server, SharePoint Online, Exchange Online, SQL Server | | End users | | DSPM3 | All in DSPM1 | | End users | | ITDR1 | Active Directory, Entra ID, PingCastle | Advanced AD risk assessment | End users | | MSP1 | All in DSPM1 + ITDR1 | | MSP Only |