Fetching Customer Cloud Secure Score Items

Question

I'm attempting to access customer data from the Microsoft Defender for Cloud Secure Score/Control API using service principal credentials.

However, I'm not receiving any data in response (output 'value' list is empty for every tenant other than our own)

Could anyone provide insights on what specific permissions are required for the service principals to successfully retrieve data from this API?

Any guidance or suggestions would be greatly appreciated.

Below are the specific items I am looking for

Answer 1

@Xavier Ibanez-Padron

Can you clarify if you are using Secure Scores - List or Secure Scores - Get?

To retrieve the properties of a secureScore object, these permissions are required:

Permission type	Least privileged permissions	Higher privileged permissions
Delegated (work or school account)	SecurityEvents.Read.All	SecurityEvents.ReadWrite.All
Delegated (work or school account)	SecurityEvents.Read.All	SecurityEvents.ReadWrite.All
Delegated (personal Microsoft account)	Not supported.	Not supported.
Application	SecurityEvents.Read.All	SecurityEvents.ReadWrite.All

In addition, in the Admin API settings, you should check if you need to set Service principals can access read-only admin APIs to Enabled.