Merge pull request #479 from ritza-co/19.07.09

Docs 19.07.09 release (Week 44, 2025)

Author: sixhobbits

docs/auto-discovery/saas-discovery.mdx

@@ -20,6 +20,29 @@ Device42 currently supports SaaS discovery from the following identity providers
 - Okta
 - G Suite (Google Workspace)
 
+## Required Permissions for SaaS Discovery in Azure
+
+All of the following permissions require read access with admin consent:
+
+- `User.Read.All`  
+- `User.ReadBasic.All`  
+- `Directory.Read.All`  
+- `Application.Read.All`  
+
+The `Group` and `Team` permissions are used to get usernames.
+
+- `Group.Read.All`  
+- `GroupMember.Read.All`  
+- `Team.ReadBasic.All`  
+- `TeamMember.Read.All`  
+
+The `AuditLog` permissions are used to determine the last time users logged in.
+
+- `AuditLogsQuery`  
+- `AuditLog.Read.All`   
+- `AuditLogsQuery-Entra.Read.All`  
+- `AuditActivity.Read`
+
 ## SaaS Discovery Items
 
 Device42 SaaS discovery collects software and user data:
@@ -87,17 +110,3 @@ sources={{
     dark: useBaseUrl('/assets/images/saas-discovery/saas-schedule-dark.png'),
 }}
 />
-
-## Generate a Report of the Discovered SaaS Items
-
-The discovered items can be listed as a downloadable Standard or Advanced report. 
-
-For example, you can conveniently select a pre-defined report after at least one SaaS discovery job is run to view the discovered items. Under **Analytics > Reports > Advanced Reporting**, search the available reports for "software" and run the **Software License Management** report. 
-
-<ThemedImage
-alt="Software license management report"
-sources={{
-    light: useBaseUrl('/assets/images/saas-discovery/software-license-management-report-light.png'),
-    dark: useBaseUrl('/assets/images/saas-discovery/software-license-management-report-dark.png'),
-}}
-/>