Adding alert.Read.all and alert.ReadWrite.all to application for Microsoft defender

Jérôme 90 Reputation points
2023-11-12T19:13:54.03+00:00

Hello,

I need to use API for Microsoft defender for endpoints to list alerts. I want to give the permission alert.Read.All, alert.ReadWrite.All but I can't find where i can do this and these permissions are not in entraID (like entraID --> App registration in azure). Can you please help me ?

Microsoft Security Microsoft Defender Microsoft Defender for Cloud
Microsoft Security Microsoft Graph
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. CarlZhao-MSFT 46,371 Reputation points
    2023-11-13T08:20:38.4033333+00:00

    Hi @Jérôme

    Refer to step 4 of this document to find the Defender API and grant the above permissions to your app.

    User's image

    Hope this helps.

    If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.

    1 person found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.