Application licensing requirements

This is a collection of the current licensing requirements each application connecting to Kaseya SIEM is required to have to function with the platform.

Microsoft

Our recommendation is to use a minimum of the following:

  • Business Basic
  • E1 license

Also helpful is the suggested but not required Microsoft Entra ID P1 licensing. Microsoft Entra ID P1 or higher provides access to the MFA report and SSPR status for users. Microsoft Entra ID P1 can be added to any subscription as a standalone add-on. If you want Microsoft Entra ID P1 included in the subscription you must sell Business Premium or E3. Be aware that while one Microsoft Entra ID P1 per tenant works, Microsoft's policy is that every user must have Microsoft Entra ID P1.

Google Workspace

A Google Workspace license that supports third-party integrations is required. Third-party integrations are supported by the following:

  • Google Workspace Enterprise
  • Business (Starter, Standard, and Plus)
  • Education (Fundamentals, Standard, Plus)
  • Cloud Identity Premium

Google Workspace Essentials Starter and Enterprise Essentials licenses do not support third-party integration and won't connect to Kaseya SIEM.

Slack

The user needed to make the connection must be a Workspace Owner or Workspace Admin.

The Slack instance must be one of the following paid:

  • Pro Plan
  • Business+
  • Enterprise Grid

Kaseya SIEM will not be able to connect to the free tier as it does not support an API connection.

Dropbox

IMPORTANT  A new official DRMM Comstore component has been introduced, designed to facilitate the retrieval of Microsoft Entra ID and its storage in a User Defined Field (UDF). Partners are no longer required to copy and paste code from this document, with the accompanying uncertainty regarding its functionality. Although the copyable code remains available below, partners can now enhance their efficiency by utilizing the newly available Comstore component titled "Microsoft Entra Device ID in UDF."

IT Glue

To connect to the IT Glue API, the following licensing is required:

  • Enterprise.

NinjaOne

A NinjaOne user with the System Administrator permission. Using a user specifically for this integration is not required, but is recommended because it can help to troubleshoot in the future.

Salesforce

There are three security licensing tiers that can be applied to Salesforce instances offering differing levels of security services.

  • Basic security
  • Salesforce Event Monitoring
  • Salesforce Shield.

Microsoft Defender for Endpoints

To access Microsoft Defender for Endpoints, you will need one of the following Microsoft 365 licenses that includes Defender for Endpoint as part of its suite:

  • Microsoft 365 E5: This license includes the full range of Microsoft security features, including Microsoft Defender for Endpoints.
  • Microsoft 365 E5 Security: A subset of the E5 plan focused on advanced security features.
  • Microsoft 365 A5: Designed for educational institutions, this plan also includes Defender for Endpoints.
  • Windows 10 Enterprise E5: This includes Microsoft Defender for Endpoints specifically for Windows 10 devices.
  • Microsoft Defender for Endpoint Plan 1: This provides essential capabilities for threat and vulnerability management, attack surface reduction, and endpoint detection and response.
  • Microsoft Defender for Endpoint Plan 2: This plan offers the complete suite of endpoint protection capabilities.

For detailed and up-to-date information on licensing, it's recommended to consult the official Microsoft documentation or contact a Microsoft representative.