Azure AD Identity Protection Connection

[cgrisham]

I'm trying to connect to Azure AD Identity Protection Risk Identity Events ( https://graph.microsoft.com/beta/identityRiskEvents ) , and this works fine when I query it through the Graph Explorer so I know I have the permissions to access the data. However when trying to use this link through the OData feed connector in PowerBI I get an "Access is Forbidden" error. There doesn't seem to be much information on what this error means or how to resolve. 

I am able to use https://graph.microsoft.com/v1.0/devices through an OData feed to query Azure AD devices without issue, but for some reason whenever I use the beta version tag I get the Access is Forbidden. 

I know I could resolve the error by writing a custom application that queries the data and then query that from PowerBI, but I rather not go that route if there is a way for me to just query the data directly from PowerBI. 

[v-huizhn-msft]

Hi @cgrisham,

In Power BI service, you can get data from Azure Active Directory Content Pack, more details, please review this article. In Power BI desktop, you connect to Azure AD Identity Protection Risk Identity Events through the OData feed connector, what authentication do you use? Active Directory Authentication is unsupported in Power BI now, please review this idea below and vote it.

https://ideas.powerbi.com/forums/265200-power-bi-ideas/suggestions/15039609-active-directory-authent...

Best Regards,
Angelia

[cgrisham]

@v-huizhn-msft  I'm looking at the Azure AD Content Pack and running into another issue maybe you can assist with 

The content pack as working as our Global Administrator had set it up, I have since used the “Take Over” feature in PowerBI to become the owner of the data set. However my credentials are not working to authenticate it. I am a Security Administrator in AzureAD, and the only documentation for permission I see are required are Security Reader. The error I am getting is a “You can’t access this application” “Azure AD Power BI Content Pack App needs permissions to access resources in your organization that only an admin can grant”

Are you able to provide some insight on to what other resources need permissions? 

[v-huizhn-msft]

Hi @cgrisham,

Your admin have set  access permission for you? Please check it.

Best Regards,
Angelia

[cgrisham]

Thank you for the response. 

I am aware of the Azure AD content pack, it doesn't quite contain all the information I'm looking for (at this point at least), and we have some of our own data we wanted to bring in also. Not sure that is possible with the content packs , though Ic ould be mistaken. 

I have been using my Organization Account to connect succesfully to https://graph.microsoft.com/v1.0/devices  , and when I attempt to use the same authenticaton method on https://graph.microsoft.com/beta/identityRiskEvents  I am unable to , due to the access is forbidden.