Microsoft Secure Score Report via PowerShell

Question

Hi,

I am trying to run Get-AzSecuritySecureScore on my m365 developer account.

I get an error about a missing SubscriptionID which makes sense because i don't have a subscription.

Get-AzSecuritySecureScore : 'this.Client.SubscriptionId' cannot be null.  
At line:1 char:1  
+ Get-AzSecuritySecureScore  
+ ~~~~~~~~~~~~~~~~~~~~~~~~~  
    + CategoryInfo          : CloseError: (:) [Get-AzSecuritySecureScore], ValidationException  
    + FullyQualifiedErrorId : Microsoft.Azure.Commands.Security.Cmdlets.Assessments.GetSecureScore  

I am wondering why then, if I go to https://security.microsoft.com/securescore I am able to view the score?

Thank you.

Answer 1

Hi there, I expect you want to collect Office365 secure scores. In this case it's better to make direct calls to Graph.

As an example, https://github.com/directorcia/Office365/blob/master/o365-ssdescpt-get.ps1

Answer 2

It depends what you want to achieve:)
Usually, using app registrations is more secure.

Answer 3

Thanks, yes, this is essentially what i want.

What is the reason/benefit of using an app registration as opposed to a user account?