How to connect to Security Center/ Defender for Endpoint API

[TePe]

Hi,

I'm trying to follow the instructions published here: Microsoft Defender for Endpoint APIs connection to Power BI | Microsoft DocsMicrosoft Defender for Endpoint APIs connection to Power BI | Microsoft Docs.

However when I log in and try to connect it fails ("We couldn't authenticate with the credentials provided. Please try again).

The endpoint it's using is https://api.securitycenter.microsoft.com/api/advancedqueries

A colleague told me that I have to do an app registration etc., I did so but now I'm in the "OAuth2-hell"... Can't I simply use the dialog Power BI is offering? I think this is clearly stated in the documentation?! Or is it something around missing licenses around defender (so that I'm not allowed to use the API)? I'm asking because when I try to use another securitycenter API like https://api.security.microsoft.com/api/incidents it simply works...

[v-lionel-msft]

Hi @TePe ,

Has your problem been solved?

Best regards,
Lionel Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[v-lionel-msft]

Hi @TePe ,

Is it like this?

This is because the account you provided does not have permission to use this API.

Try to sign up for a free trial version by yourself.

Create custom reports using Power BI 

Best regards,
Lionel Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.