%3CLINGO-SUB%20id%3D%22lingo-sub-1439572%22%20slang%3D%22en-US%22%3EMigrate%20the%20old%20Power%20BI%20App%20to%20Microsoft%20Defender%20ATP%20Power%20BI%20templates!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1439572%22%20slang%3D%22en-US%22%3E%3CP%3ESeveral%20months%20ago%2C%20we%20talked%20about%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fmicrosoft-defender-atp%2Fcreate-custom-reports-using-microsoft-defender-atp-apis-and%2Fba-p%2F1007684%22%20target%3D%22_blank%22%20rel%3D%22noopener%22%3Ecreating%20custom%20reports%20using%20Microsoft%20Defender%20ATP%20APIs%20and%20Power%20BI%3C%2FA%3E%2C%26nbsp%3Band%20shared%20samples%20for%20alert%20management%2C%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fmicrosoft-defender-atp%2Fconnect-the-dots-using-a-device-network-overview-power-bi-report%2Fba-p%2F1238287%22%20target%3D%22_blank%22%20rel%3D%22noopener%22%3Edevice%20network%20overview%3C%2FA%3E%3CSPAN%3E%2C%3C%2FSPAN%3E%20and%20a%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fmicrosoft-defender-atp%2Fthreat-amp-vulnerability-management-apis-are-now-generally%2Fba-p%2F1304615%22%20target%3D%22_blank%22%20rel%3D%22noopener%22%3Ethreat%20and%20vulnerability%20report%3C%2FA%3E.%3CBR%20%2F%3E%3CBR%20%2F%3EWe%E2%80%99re%20happy%20to%20share%20that%20in%20the%20past%20few%20months%20we%20have%20extended%20the%20%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2Fmicrosoft%2FMicrosoftDefenderATP-PowerBI%2Ftree%2Fmaster%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EMicrosoft%20Defender%20ATP%20Power%20BI%20GitHub%20repo%3C%2FA%3E%20and%20enhanced%20the%20set%20of%20complementary%20APIs%20to%20help%20address%20additional%20reporting%20use%20cases%20in%20your%20organization.%3CBR%20%2F%3E%3CBR%20%2F%3EThe%20Power%20BI%20GitHub%20now%20provides%20Microsoft%20Defender%20ATP%20customers%20a%20self-service%20repository%20to%20build%20on%20top%20of%20a%20pre-built%20set%20of%20reports%20that%20can%20easily%20be%20connected%20to%20their%20own%20data%20and%20are%20extendable%20to%20address%20additional%20experiences%2C%20leveraging%20the%20rich%20and%20complete%20set%20of%20APIs%20available%20in%20Microsoft%20Defender%20ATP.%20You%20can%20even%20integrate%20third-party%20data%20sources%20to%20further%20enhance%20the%20data%20set.%3CBR%20%2F%3E%3CBR%20%2F%3EAs%20part%20of%26nbsp%3Bthis%26nbsp%3Boverall%20alignment%2C%20we%20are%20deprecating%20the%20%3CA%20href%3D%22https%3A%2F%2Fdf.securitycenter.microsoft.com%2Fpreferences2%2Fpowerbi%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Eprevious%26nbsp%3BPower%20BI%20connector%3C%2FA%3E%2C%20and%20are%20asking%26nbsp%3Byou%26nbsp%3Bto%20use%20the%20new%20templates%20instead.%26nbsp%3BThe%20migration%20is%26nbsp%3Beasy%20and%26nbsp%3Bstraight%26nbsp%3Bforward.%26nbsp%3B%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ETimelines%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EThe%20old%20Power%20BI%20connector%20will%20be%20available%20for%20the%26nbsp%3Bnext%20weeks%2C%20until%20%3CSTRONG%3EJuly%26nbsp%3B5th%2C%202020%3C%2FSTRONG%3E.%20We%20will%20then%20discontinue%20support%20for%20the%20old%20application.%26nbsp%3B%26nbsp%3B%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EMigration%20path%3C%2FSTRONG%3E%26nbsp%3B%3CBR%20%2F%3EThe%20old%20report%20is%20fully%20replaced%20by%20the%20brand-new%20templates%20available%20in%20our%20GitHub%3A%3CBR%20%2F%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2Fmicrosoft%2FMicrosoftDefenderATP-PowerBI%2Ftree%2Fmaster%2FAdministration%2520and%2520Management%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EAdministration%20and%20Management%3C%2FA%3E%3A%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22pbi_mgmtreport.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F196430i861BB0FD314DDCCB%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22pbi_mgmtreport.png%22%20alt%3D%22pbi_mgmtreport.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CDIV%20id%3D%22tinyMceEditorThorsten%20Henking_0%22%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3E-ERR%3AREF-NOT-FOUND-Threat%20and%20vulnerability%20management%3A%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22pbi_tvm_kb.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F196424i172083204F5046AA%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22pbi_tvm_kb.png%22%20alt%3D%22pbi_tvm_kb.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3ESimply%20download%20these%20reports%20and%20add%20a%20connection%20the%20relevant%20tables%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22connection.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F196433i64287EC17549C681%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22connection.png%22%20alt%3D%22connection.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CDIV%20id%3D%22tinyMceEditorThorsten%20Henking_1%22%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3EIn%20Power%20BI%2C%20select%26nbsp%3B%3CSTRONG%3EOrganizational%20account%3C%2FSTRONG%3E%26nbsp%3B%26gt%3B%26nbsp%3B%3CSTRONG%3ESign%20in%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22signin.png%22%20style%3D%22width%3A%20701px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F196427iBC2692014DA01C4F%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22signin.png%22%20alt%3D%22signin.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EEnter%20your%20credentials%20and%20wait%20to%20be%20signed%20in%3CBR%20%2F%3EClick%26nbsp%3B%3CSTRONG%3EConnect%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22signin2.png%22%20style%3D%22width%3A%20699px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F196428iB1470C4C835B2BF7%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22signin2.png%22%20alt%3D%22signin2.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EYou%20can%20extend%20and%20create%20your%20own%20dashboard%20or%20simply%20build%20on%20top%20of%20these.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EAdditional%20resources%3A%3C%2FSTRONG%3E%20%3CBR%20%2F%3E-ERR%3AREF-NOT-FOUND-Learn%20to%20create%20a%20Power%20BI%20report%20on%20top%20of%20Microsoft%20Defender%20ATP%20APIs%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ETalk%20to%20us%3C%2FSTRONG%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAs%20always%2C%20please%20don%E2%80%99t%20hesitate%20to%20contact%20our%20team%20at%20the%26nbsp%3BMicrosoft%20Defender%26nbsp%3BATP%20community%20if%20you%20have%20any%20questions%20or%20concerns.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F149712%22%20target%3D%22_blank%22%3E%40Efrat%20Kliger%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-1439572%22%20slang%3D%22en-US%22%3E%3CP%3ESeveral%20months%20ago%2C%20we%20talked%20about%20-ERR%3AREF-NOT-FOUND-creating%20custom%20reports%20using%20Microsoft%20Defender%20ATP%20APIs%20and%20Power%20BI%2C%26nbsp%3Band%20shared%20samples%20for%20alert%20management%2C%20-ERR%3AREF-NOT-FOUND-device%20network%20overview%3CSPAN%3E%2C%3C%2FSPAN%3E%20and%20a%20-ERR%3AREF-NOT-FOUND-threat%20and%20vulnerability%20report.%3C%2FP%3E%0A%3CP%3EWe%E2%80%99re%20happy%20to%20share%20that%20in%20the%20past%20few%20months%20we%20have%20extended%20the%20-ERR%3AREF-NOT-FOUND-Microsoft%20Defender%20ATP%20Power%20BI%20GitHub%20repo%20and%20enhanced%20the%20set%20of%20complementary%20APIs%20to%20help%20address%20additional%20reporting%20use%20cases%20in%20your%20organization.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1441238%22%20slang%3D%22en-US%22%3ERe%3A%20Migrate%20the%20old%20Power%20BI%20App%20to%20Microsoft%20Defender%20ATP%20Power%20BI%20templates!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1441238%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20for%20the%20update%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F73710%22%20target%3D%22_blank%22%3E%40Thorsten%20Henking%3C%2FA%3E%26nbsp%3Band%20I%20do%20understand...%20but%20it%20seems%20the%20PBI%20service%20connector%20has%20already%20been%20turned%20of%20for%20my%20tenant%20(See%20screenshot).%3C%2FP%3E%3CP%3EThe%20authentication%20method%20was%20removed%20and%20the%20dashboard%20we%20use%20to%20drive%20patch%20compliance%20with%20great%20success%20has%20been%20offline%20for%20the%20last%20week%20%3A(%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22jamrobot_0-1591295580113.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F196567i222A35452307B298%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22jamrobot_0-1591295580113.png%22%20alt%3D%22jamrobot_0-1591295580113.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1466993%22%20slang%3D%22en-US%22%3ERe%3A%20Migrate%20the%20old%20Power%20BI%20App%20to%20Microsoft%20Defender%20ATP%20Power%20BI%20templates!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1466993%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20a%20good%20way%20to%20avoid%20the%20API%20limitations%20in%20PowerBI.%3C%2FP%3E%3CP%3EI%20am%20working%20with%20an%20environment%20with%20more%20than%2020.000%20Machines%2C%20and%20when%20I%20try%20to%20pull%20data%20into%20PowerBI%20I%20frequently%20meet%20the%20API%20limits.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22PH_RE_0-1592294033993.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F198980i33ED0DD89BE8734F%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22PH_RE_0-1592294033993.png%22%20alt%3D%22PH_RE_0-1592294033993.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3Eespecially%20when%20expanding%20columns%20in%20queries.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1612117%22%20slang%3D%22en-US%22%3ERe%3A%20Migrate%20the%20old%20Power%20BI%20App%20to%20Microsoft%20Defender%20ATP%20Power%20BI%20templates!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1612117%22%20slang%3D%22en-US%22%3E%3CP%3EIt%20looks%20like%20most%20of%20the%20sample%20queries%20on%20GitHub%20are%20using%20an%20out%20of%20date%20schema%20and%20won't%20load.%26nbsp%3B%20Any%20chance%20those%20could%20be%20updated%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E

Several months ago, we talked about creating custom reports using Microsoft Defender ATP APIs and Power BI, and shared samples for alert management, device network overview, and a threat and vulnerability report.

We’re happy to share that in the past few months we have extended the Microsoft Defender ATP Power BI GitHub repo and enhanced the set of complementary APIs to help address additional reporting use cases in your organization.

The Power BI GitHub now provides Microsoft Defender ATP customers a self-service repository to build on top of a pre-built set of reports that can easily be connected to their own data and are extendable to address additional experiences, leveraging the rich and complete set of APIs available in Microsoft Defender ATP. You can even integrate third-party data sources to further enhance the data set.

As part of this overall alignment, we are deprecating the previous Power BI connector, and are asking you to use the new templates instead. The migration is easy and straight forward.  

Timelines 

The old Power BI connector will be available for the next weeks, until July 5th, 2020. We will then discontinue support for the old application.   

Migration path 
The old report is fully replaced by the brand-new templates available in our GitHub:
Administration and Management:

pbi_mgmtreport.png

 

Threat and vulnerability management:

pbi_tvm_kb.png

Simply download these reports and add a connection the relevant tables:

 

connection.png

 

In Power BI, select Organizational account > Sign in

signin.png

Enter your credentials and wait to be signed in
Click Connect

signin2.png

You can extend and create your own dashboard or simply build on top of these.

Additional resources:
Learn to create a Power BI report on top of Microsoft Defender ATP APIs

 

Talk to us 

As always, please don’t hesitate to contact our team at the Microsoft Defender ATP community if you have any questions or concerns. 

@Efrat Kliger

 

 

3 Comments
Occasional Contributor

Thanks for the update @Thorsten Henking and I do understand... but it seems the PBI service connector has already been turned of for my tenant (See screenshot).

The authentication method was removed and the dashboard we use to drive patch compliance with great success has been offline for the last week :(

 

jamrobot_0-1591295580113.png

 

Senior Member

Is there a good way to avoid the API limitations in PowerBI.

I am working with an environment with more than 20.000 Machines, and when I try to pull data into PowerBI I frequently meet the API limits. 

 

PH_RE_0-1592294033993.png

especially when expanding columns in queries.

 

 

 

 

Occasional Visitor

It looks like most of the sample queries on GitHub are using an out of date schema and won't load.  Any chance those could be updated?