Tenant Secure Score - Average Comparative Scores data are not available in Graph API

Question

From August 7, 2021 onwards, I couldn't retrieve the data for Average Comparative scores in Microsoft Secure Scores via REST API.

REST API used : https://graph.microsoft.com/beta/security/secureScores

Shortend sample Response:

{
"id": "$$$$$$$$$$$$$$",
"azureTenantId": "$$$$$$$$$$$",
"activeUserCount": 22,
"createdDateTime": "2021-09-08T00:00:00Z",
"currentScore": 27.96,
"enabledServices": [
"HasProject",
"HasVisio",
"HasAADBasic",
"HasTeams"
],
"licensedUserCount": 250,
"maxScore": 79,
"vendorInformation": {
"provider": "SecureScore",
"providerVersion": null,
"subProvider": null,
"vendor": "Microsoft"
},
** "averageComparativeScores": [
{
"basis": "AllTenants",
"averageScore": 0,
"deviceScoreMax": 0,
"appsScoreMax": 0,
"infrastructureScoreMax": 0,
"dataScoreMax": 0,
"identityScore": 0,
"deviceScore": 0,
"appsScore": 0,
"identityScoreMax": 0,
"infrastructureScore": 0,
"dataScore": 0
},
{
"basis": "IndustryTypes",
"averageScore": 0,
"deviceScoreMax": 0,
"appsScoreMax": 0,
"infrastructureScoreMax": 0,
"dataScoreMax": 0,
"identityScore": 0,
"deviceScore": 0,
"appsScore": 0,
"identityScoreMax": 0,
"infrastructureScore": 0,
"dataScore": 0
},
{
"basis": "TotalSeats",
"averageScore": 0,
"deviceScoreMax": 0,
"appsScoreMax": 0,
"infrastructureScoreMax": 0,
"dataScoreMax": 0,
"identityScore": 0,
"deviceScore": 0,
"appsScore": 0,
"identityScoreMax": 0,
"infrastructureScore": 0,
"dataScore": 0
}
] ** ,
"controlScores": [
{
"controlCategory": "Identity",
"controlName": "AdminMFAV2",
"description": "Requiring multi-factor authentication (MFA) for all administrative roles makes it harder for attackers to access accounts. Administrative roles have higher permissions than typical users. If any of those accounts are compromised, critical devices and data is open to attack. ",
"score": 6.96,
"implementationStatus": "You have 16 out of 23 users with administrative roles registered and protected with MFA.",
"controlState": "active",
"lastSynced": "2021-09-08T00:00:00Z",
"IsApplicable": "true",
"count": "7",
"total": "23",
"scoreInPercentage": 69.56
}
] }

Is there a bug in this API else I need to use different REST API for fetching these comparative scores?

Thanks in Advance

Regards,
Maerona Wynn

Answer 1

I have similar issue now where the averageComparativeScores id comming empty but in Microsoft Secure Score Portal I can see the information

Answer 2

@Sofia Herrera , did you find a solution to that issue? I think we are having the same issue since november. Rather the the information above, if I query the graph, the result for the averageComparativeScores is completly empty.

"averageComparativeScores": [],

Answer 3

No. I opened support ticket and i have provided the evidences, but still waiting for a resolution.