Created by Claude - please verify

Cloud Discovery - discovered apps per stream through the Cloud Discovery API in Microsoft Graph (beta).

Required Microsoft Graph permissions

CloudApp-Discovery.Read.All — application permission, granted to the app registration with admin consent.

Licence: Microsoft Defender for Cloud Apps with Cloud Discovery (log upload or Defender for Endpoint integration).

Endpoints: GET /beta/security/dataDiscovery/cloudAppDiscovery/uploadedStreams · GET .../uploadedStreams/{id}/aggregatedAppsDetails(period=duration'P30D')

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Shadow SaaS from Defender for Cloud Apps (30 days)

Which cloud apps do people actually use - the ones IT never approved? Cloud Discovery sees them in firewall and proxy logs or through Defender for Endpoint. This report lists every discovered app with users, upload volume, risk score and whether it is sanctioned.