SecurityIdentitiesHealth.Read.All
— application permission, granted to the app registration with admin consent.
Licence: Microsoft Defender for Identity (or Microsoft 365 E5 Security).
Endpoint:
GET /v1.0/security/identities/healthIssues
If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.
Defender for Identity Sensor Health
Defender for Identity watches domain controllers for Kerberoasting, DCSync, pass-the-hash and similar attacks - but only while its sensors run, its directory service account works and auditing is configured. Open health issues mean attacks on Active Directory may go undetected.
Loading...