Issue with Finding Vulnerability.read.all Permission in Azure AD for Defender API

Question

Product & Version: Azure AD, Microsoft Defender Endpoint API

Issue Description: I'm trying to access the Microsoft Defender API using the link: Defender Endpoint - Get All Vulnerabilities. The documentation mentions the Vulnerability.read.all permission, but when I go to Azure AD to register an app and assign this permission, it is missing.

Steps Already Taken:

1. Navigated to Azure AD.
2. Tried registering a new app.
3. Searched for the Vulnerability.read.all permission during the permission assignment step.

Question: Has the Vulnerability.read.all permission been deprecated? If so, what alternative permissions or methods should I use to access vulnerability details from the Defender API?

Additional Information: None at the moment, but happy to provide more details if necessary.

Answer 1

Navigate to "APIs my organization users".
Type into the search box "WindowsDefenderATP"
Select "Delegated permissions" or "Application permissions".
Scroll to the bottom.

Answer 2

Hello DYK,

thank you for visiting this moderated community forum.

Azure Active Directory (Azure AD) is a cloud-based identity and access management service. Azure AD enables your employees access external resources, such as Microsoft 365, the Azure portal, and thousands of other SaaS applications.

Please also check out the free training about Azure Active Directory.

---

If the response helped, do "Accept Answer". If it doesn't work, please let us know the progress. All community members with similar issues will benefit by doing so. Your contribution is highly appreciated.