List all security baselines assessment profiles
Applies to:
- Microsoft Defender for Endpoint Plan 1
- Microsoft Defender for Endpoint Plan 2
- Microsoft Defender Vulnerability Management
- Microsoft Defender XDR
Want to experience Microsoft Defender Vulnerability Management? Learn more about how you can sign up to the Microsoft Defender Vulnerability Management public preview trial.
1. Get security baselines assessment profiles
This API retrieves a list of all security baselines assessment profiles created by the organization.
1.1 Parameters
- Supports OData V4 queries.
- OData supported operators:
- $filter on : id,name, operatingSystem, operatingSystemVersion, status, settingsNumber, passedDevices, totalDevices
- $top with max value of 10,000.
- $skip.
1.2 HTTP request
GET:/api/baselineProfiles
1.3 Request headers
Name | Type | Description |
---|---|---|
Authorization | String | Bearer {token}. Required. |
1.4 Properties
Property | Type | Description |
---|---|---|
Id | String | Unique identifier for the specific baseline profile. |
name | String | The profile name. |
description | String | The profile description. |
benchmark | String | The profile benchmark. |
version | String | The profile version. |
operatingSystem | String | The profile applicable operating system. |
operatingSystemVersion | String | The profile applicable operating system version. |
status | Boolean | Indicates whether the profile is active or not |
complianceLevel | String | The compliance level chosen for the profile. |
settingsNumber | Int | Number of selected configurations in the profile. |
createdBy | String | The user that created this profile. |
lastUpdatedBy | DateTime | The last user to modify this profile. |
createdOnTimeOffset | DateTime | The date and time the profile was created. |
lastUpdateTimeOffset | DateTime | The date and time the profile was last updated. |
passedDevices | Int | The number of devices applicable to this profile that are compliant with all of the profile configurations. |
totalDevices | Int | Number of devices applicable to this profile. |
1.5 Example
1.5.1 Request example
GET https://api.securitycenter.microsoft.com/api/baselineProfiles
1.6.2 Response example
{
"@odata.context": "https:// api.securitycenter.microsoft.com/api/$metadata#Collection(microsoft.windowsDefenderATP.api.PublicBaselineProfileDto)",
"value":
[
{
"id": "02bcbb9d-d197-479e-811e-1cd5a6f9f8fa",
"name": "Windows 10 build 1909 CIS profile",
"description": "important",
"benchmark": "CIS",
"version": "1.0.0",
"operatingSystem": "Windows 10",
"operatingSystemVersion": "1909",
"status": true,
"complianceLevel": "Level 1 (L1) - Corporate/Enterprise Environment (general use)",
"settingsNumber": 51,
"createdBy": "user@org.net",
"lastUpdatedBy": null,
"createdOnTimestampUTC": "0001-01-01T00:00:00Z",
"lastUpdateTimestampUTC": "0001-01-01T00:00:00Z",
"passedDevices": 0,
"totalDevices": 10
}
]
}
See also
Tip
Do you want to learn more? Engage with the Microsoft Security community in our Tech Community: Microsoft Defender for Endpoint Tech Community.
Feedback
https://aka.ms/ContentUserFeedback.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see:Submit and view feedback for