Fetching Customer Cloud Secure Score Items

Xavier Ibanez-Padron 0 Reputation points
2024-07-18T19:49:25.8733333+00:00

I'm attempting to access customer data from the Microsoft Defender for Cloud Secure Score/Control API using service principal credentials.

However, I'm not receiving any data in response (output 'value' list is empty for every tenant other than our own)

Could anyone provide insights on what specific permissions are required for the service principals to successfully retrieve data from this API?

Any guidance or suggestions would be greatly appreciated.

Below are the specific items I am looking for

cloud

Azure API Management
Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
2,051 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,335 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Marilee Turscak-MSFT 36,806 Reputation points Microsoft Employee
    2024-07-19T00:11:38.0933333+00:00

    @Xavier Ibanez-Padron

    Can you clarify if you are using Secure Scores - List or Secure Scores - Get?

    To retrieve the properties of a secureScore object, these permissions are required:

    Permission type Least privileged permissions Higher privileged permissions
    Delegated (work or school account) SecurityEvents.Read.All SecurityEvents.ReadWrite.All
    Delegated (work or school account) SecurityEvents.Read.All SecurityEvents.ReadWrite.All
    Delegated (personal Microsoft account) Not supported. Not supported.
    Application SecurityEvents.Read.All SecurityEvents.ReadWrite.All

    In addition, in the Admin API settings, you should check if you need to set Service principals can access read-only admin APIs to Enabled.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.