Unable to Retrieve Exposure Score & Vulnerability Score from Microsoft Defender API

[Nandhana___nk]

Hi everyone,

I’m currently working on integrating Microsoft Defender for Endpoint (EDR) with Power BI to build a security dashboard using Azure services.

So far, I’ve successfully retrieved the Secure Score via the Microsoft Defender API. However, I’m stuck trying to retrieve the Exposure Score and Vulnerability Score.

After doing some research, I found that the necessary permissions like Vulnerability.Read.All and Exposure.Read.All seem to be missing from Azure AD’s available API permissions list under Microsoft Defender for Endpoint.

Has anyone else faced this issue?

[v-nmadadi-msft]

Hi @Nandhana___nk ,

We are following up once again regarding your query. Could you please confirm whether you have raised a post in 

Azure Community?

If the issue has been resolved, we kindly request you to share the resolution or key insights here to help others in the community. If we don’t hear back, we’ll go ahead and close this thread.

Should you need further assistance in the future, we encourage you to reach out via the Microsoft Fabric Community Forum and create a new thread. We’ll be happy to help.

Thank you for your understanding and participation.

[v-nmadadi-msft]

Hi @Nandhana___nk ,
Have you had a chance to open a thread in the Azure Community to get more insights on your issue?
So as to get best possible help and more targeted guidance

Thank you

[Nandhana___nk]

Thanks so much for your help! I really appreciate the time you took to respond. Your input got me a step closer. I'm currently facing an authentication issue while trying to access the vulnerability and exposure scores even though I've given all required permissions. If you have any insights, that would be amazing!

[v-nmadadi-msft]

Hi @burakkaragoz ,
Thanks for reaching out to the Microsoft fabric community forum.

In this Forum you will find people who are good at Power BI and Fabric, as the root cause of the issue is related to Microsoft defender, for issues related to it, please raise a question in Azure Community  Azure Community Support | Microsoft Azure for best possible help.
In the meantime for any other issues related to Fabric please don’t hesitate to raise a post in this forum.

If this post helps, then please consider Accepting as solution to help the other members find it more quickly and consider giving a KUDOS. Feel free to reach out if you need further assistance.
Thank you

[burakkaragoz]

Hi @Nandhana___nk ,

This is a common situation when working with Microsoft Defender for Endpoint API and Power BI. Here are a few things you can try:

---

1. Check the API permissions in Azure AD:

• Go to Azure AD > App registrations > Your App > API permissions.
• Click "Add a permission" and select Microsoft Threat Protection (not just Defender for Endpoint).
• Search for and add the following permissions if available:
  • Vulnerability.Read.All
  • Exposure.Read.All
• If these are not visible, make sure you are searching under the correct API. Sometimes permissions are found under "Microsoft Threat Protection" instead of "Microsoft Defender for Endpoint".

---

2. Grant Admin Consent:

• After adding permissions, an Azure AD admin needs to grant consent.
• Without admin consent, the permissions will not be active for your app.

---

3. Licensing requirements:

• The Exposure Score and Vulnerability Score APIs may only be available if your tenant has the Microsoft Defender Vulnerability Management add-on.
• Check your subscription to make sure this feature is enabled.

---

4. API token scope:

• When requesting your Azure AD token, use this scope:
  https://api.security.microsoft.com/.default

---

Helpful links:

• Defender for Endpoint API permissions documentation
• Get Exposure Score API reference

---

Summary:

• Double check that you’re assigning the right permissions under the right API.
• Make sure admin consent is granted.
• Confirm your Defender license covers Vulnerability Management.
• Use the correct token scope for your requests.

If you’ve tried all the above and still have issues, sometimes it helps to remove and re-add the permissions, or wait a few minutes for changes to propagate.

Hope this helps! If you resolve it, please update the thread so others can benefit.