Skip to content

BI for Defender documentation

BI for Defender documentation

BI for Defender turns Microsoft Defender for Endpoint data into clear, actionable Power BI reporting, deployed entirely inside your own tenant. Use these guides to install the app, register the Microsoft Entra app, connect your data, and keep your reports current.

About BI for Defender

Section titled “About BI for Defender”

BI for Defender is a Power BI reporting solution that runs entirely inside your own Microsoft tenant. It connects to Microsoft Defender for Endpoint through the Microsoft Graph Security API: no agents on endpoints, no vendor portal, and your data stays in your Power BI workspace under your Microsoft 365 tenant policies. Pre-built dashboards cover threat detection and response, device security posture, application control, and vulnerability management, so you can track alert severity, detection sources, security configuration scores, exposure levels, and CVE remediation progress across all Defender-managed devices.

How the docs are organized

Section titled “How the docs are organized”
  • Get Started walks you through installing BI for Defender from the Microsoft Marketplace, requesting a license, creating the Microsoft Entra app registration, configuring the semantic model, and setting up data sync. Once the Setup Guide is done, you have a working set of dashboards.
  • Advanced Configuration is optional. Add-ons such as Application Controls, Browser Extension Inventory, and Cloud App Usage unlock or enrich specific dashboards. The product works fine without them; affected dashboards simply show no data until the matching Microsoft entitlement or configuration is in place. (Browser Extension Inventory, for example, requires the Microsoft Defender Vulnerability Management add-on.)
  • Administration covers ongoing operations: semantic model parameters, Entra app permissions, backing up custom reports, performing in-place upgrades, and installing custom templates.
  • User Guides show you how to edit reports, build pop-up box visuals, and merge multiple datasets for cross-product reporting.
  • What’s New lists the changes in each release so you can track new features and fixes.

Have a question? Ask Pax.

Section titled “Have a question? Ask Pax.”

Pax is the PowerStacks assistant. Look for the Ask Pax button at the top of any article to get answers drawn from this documentation.