Forum Discussion
SergioT1228
Feb 15, 2023Brass Contributor
Depricated MDI ATP Portal - Scheduled reports
Hello, I see that the Classic ATP (atp.azure.com) will be redirecting to the Security portal. However I'm curious about the Scheduled reports we have set up for Lateral movements and Summary. I don...
StuartH .
Mar 02, 2023Brass Contributor
There seems to be a few threads on a similar subject (new portal transition and losing "features"), so was not sure where to post in reply. LiorShapira you seem happy to want the feedback...
The only scheduled report we use DAILY is the Modifications to sensitive groups, and if you think logically about that, it is a rational report that is useful on a schedule. MDI has seemingly good logic in what these are, and being informed by push notification is exceedingly important (be even better if we didn't get emailed when there are ZERO entries in there, but hey!)...one does not want to have to run an adhoc query to do that - it is a backward step. Currently, I think the suggestion as a "workaround" is to run the Advanced Hunting query and define the groups your are interested in - that is not workable at all. This alone would stop us moving to the new portal, as pathetic as that seems. FWIW, I actually like the new portal...just struggling to find things. I know there is a mapping table to show where things are...but it doesn't say what is missing or being thought about !
LiorShapira
Microsoft
Mar 05, 2023StuartH . Thanks for your feedback, I appreciate it. We will take it into account and will make sure to update the documentation.
- StuartH .Mar 06, 2023Brass ContributorThanks
Can I ask though....as we have reverted to the "old" portal, the (mod to sensitive groups etc) reports are emailed, and still valid/accessed just fine. The moment we flip to the new portal, the link obviously fails. The new portal REMOVES the ability to schedule and also, even if it existed before, access to the data is removed too...even though the reports are still emailed ! This seems all wrong- ziggyk80Mar 23, 2023Copper Contributor
LiorShapira, we utilized the weekly scheduled reports too and they stopped working when the MDI portal redirection was enabled.
Are there plans to migrate this functionality to security.microsoft.com or another portal? If not, I recommend adding some information to the emailed reports sharing the reports will be deprecated and steps to disable them. BTW, with the portal redirection is enabled, there is no way to disable the reports. If June 30th comes and the portal redirection is forced, there will be no way for people to disable the email reports and people will start putting in tickets if they are using the reports.