Azure AD Application Required Permissions
Copy the URL link to this section to share
Below are all of the permissions required to be configured on the BI for Defender Azure AD App Registration. See Create Azure AD App Registration for more information.
Prerequisites: The user configuring these permissions requires Global Admin and Subscription Admin rights.
Required for basic functionality:
----------------------------------------------------------------
API:
API:
----------------------------------------------------------------
API:
Microsoft Graph
Permission Type:Application
Permission(s):ThreatHunting.Read.All
SecurityEvents.Read.All
SecurityAlert.Read.All
SecurityIncident.Read.All
API:
WindowsDefenderATP
Permission Type:Application
Permission(s):Machine.Read.All
Security.Recommendation.Read.All
Software.Read.All
Vulnerability.Read.All
