search

splunk / splunk-add-on-microsoft-azure

Splunk Add-on for Microsoft Azure
Apache License 2.0
11 stars 7 forks source link

riskUsers permissions #43

Closed McCurity closed 1 year ago

McCurity commented 1 year ago

I'm not certain why but on February 5th it appears I started getting errors for:

requests.exceptions.HTTPError: 403 Client Error: Forbidden for url: https://graph.microsoft.com/v1.0/identityProtection/riskyUsers

In looking at the Graph API Explorer permissions it seems that endpoint requires IdentityRiskyUser.Read.All however that permission is not identified on the permissions spreadsheet https://docs.google.com/spreadsheets/d/1YJAqNmcXZU-7O9CxVKupOkR6q2S8TXriMeLAUMYmMs4/edit#gid=0

I suspect it's the permissions spreadsheet that needs updated but for it to start happening a month ago with no app updates since Sept I can only conclude MS modified something on their side.

JasonConger commented 1 year ago

The permission sheet has been updated.