Your organization has Microsoft Defender for Cloud Apps licensed but has not yet integrated it with Microsoft 365. Security analysts report that they cannot see governance actions such as suspending users or viewing detailed file activity for SharePoint and Exchange Online within the Defender for Cloud Apps portal. They can only see limited discovery data. What must you configure to enable full visibility and governance capabilities over Microsoft 365 workloads?