Graph API to retrieve Secure Score for M365

Question

Graph API to retrieve Secure Score for M365

Jing Xu 21

Hi

I can see the following AP can be used to retrieve Azure secure score, is there an equivalent API that can be used to retrieve M365 score?
https://learn.microsoft.com/en-us/graph/api/securescore-get?view=graph-rest-1.0&tabs=http

Thanks
Jing

Accepted answer

4 additional answers

Your answer

Answer 1

JanardhanaVedham-MSFT 3,566

Hi @Jing Xu ,

Below Microsoft Graph Security APIs can be used to get Microsoft Secure Scope of M365 tenant. Please refer the below addtional microsoft documentation for Graph APIs & more information:

https://learn.microsoft.com/en-us/graph/api/resources/security-api-overview?view=graph-rest-1.0#secure-score
https://learn.microsoft.com/en-us/graph/api/resources/securescore?view=graph-rest-1.0
https://learn.microsoft.com/en-us/graph/api/resources/securescorecontrolprofile?view=graph-rest-1.0
https://techcommunity.microsoft.com/t5/Security-Privacy-and-Compliance/A-new-home-and-an-all-new-look-for-Microsoft-Secure-Score/ba-p/529641

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have any further questions about this answer, please click "Comment".

Jing Xu 21 Reputation points

2022-01-06T10:10:20.857+00:00
Thanks for your detailed explanation @JanardhanaVedham-MSFT . So my understanding is:

Microsoft Secure Score is used for Microsoft SaaS workloads(Identity, Device, Apps);

Secure Score is for Azure workload;

Microsoft Graph Security APIs can be used to retrieve both secure score for Azure and Microsoft Secure score(for M365), will this be done using the "id" field?

One last point, I am slightly confused by a comment from the blog, as it suggests Microsoft Secure Score covers everything, has it changed since?
https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/azure-secure-score-vs-microsoft-secure-score/ba-p/2459684![162881-screenshot-2022-01-06-at-100810.png][1]

Thanks again for your help!
Jing
JanardhanaVedham-MSFT 3,566 Reputation points

2022-01-06T13:29:12.433+00:00

Please find the clarifications on your couple of queries :

Currently Microsoft Graph Security APIs can be used to fetch Microsoft Secure score (for M365) only and these APIs are not applicable to fetch secure score for Azure . Yes, "Id" property can be used to fetch Microsoft 365 secure score data.

List Secure Scores : https://learn.microsoft.com/en-us/graph/api/security-list-securescores?view=graph-rest-1.0&tabs=http

Get Secure Scores : https://learn.microsoft.com/en-us/graph/api/securescore-get?view=graph-rest-1.0&tabs=http

Also, as mentioned in this documentation that was last updated on 11/19/2021 and currently below are the products included in Microsoft Secure Score :

Hope this helps.

If the answer is helpful, please click "Accept Answer" and kindly upvote it, so that it will be useful for other community users. If you have any further questions about this answer, please click "Comment".

Answer 2

Vasil Michev 119.5K MVP Volunteer Moderator

Those are the M365 Secure scores, so you already have the answer.

Answer 3

Jing Xu 21

thanks @Vasil Michev , do you mean these APIs can be used to retrieve both M365 and Azure Security score? It's not clear in the documentation and I assumed this is for Azure Secure score as I can find a property azureTenantId.

JanardhanaVedham-MSFT 3,566 Reputation points

2022-01-06T08:39:42.297+00:00

Hi @Jing Xu ,

As you see in the below documentation, Microsoft Secure Score applicable for Microsoft SaaS workloads (ie., Microsoft 365).

https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/azure-secure-score-vs-microsoft-secure-score/ba-p/2459684

The Microsoft Secure Score contains three distinct control and score categories:

Identity (Azure Active Directory accounts and roles)
Devices (Microsoft Defender for Endpoint)
Apps (email and cloud apps, including Office 365 and Microsoft Defender for Cloud Apps)

https://learn.microsoft.com/en-us/microsoft-365/security/defender/microsoft-secure-score?view=o365-worldwide#products-included-in-secure-score

You can also refer the below from the above documentation :

IHope this helps.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have any further questions about this answer, please click "Comment".

Answer 4

Jing Xu 21

Thanks @JanardhanaVedham-MSFT . That's very helpful. What's the best way to retrieve secure score for Azure? We would like to display in power BI dashboard.

JanardhanaVedham-MSFT 3,566 Reputation points

2022-01-06T14:56:32.983+00:00

Hi @Jing Xu ,

Thank you for your feedback. Since the originial post has been answered, so I would request you to create a new post on secure score for Azure requirement.

Also, if the provided answer is helpful to you, please click "Accept Answer" and kindly upvote it, so that it will be useful for other community users. If you have any further questions, please click "Comment".

Answer 5

Joseph Rivera-Santiago 0

Is the id field at the end of the API request the tenantid or a different id

Share via

Graph API to retrieve Secure Score for M365

4 additional answers

Your answer