Pull Audit and Compliance Data via Microsoft Graph

%3CLINGO-SUB%20id%3D%22lingo-sub-3372195%22%20slang%3D%22en-US%22%3EPull%20Audit%20and%20Compliance%20Data%20via%20Microsoft%20Graph%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3372195%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20been%20using%20reports%20and%20dashboards%20in%20Microsoft%20Compliance%20Center.%20The%20big%20issue%20on%20those%20is%20that%20the%20data%20is%20only%20%3CEM%3E%3CU%3Eavailable%20and%20limited%20for%2030%20days.%3C%2FU%3E%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20need%20to%20pull%20audit%2Fcompliance%20data%20such%20as%20those%20we%20have%20in%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fcompliance.microsoft.com%2F%3A%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3E%3CSTRONG%3Ehttps%3A%2F%2Fcompliance.microsoft.com%2F%3C%2FSTRONG%3E%3A%3C%2FA%3E%3C%2FP%3E%3CP%3Ea.%26nbsp%3B%3CEM%3E%3CSTRONG%3EMicrosoft%20Purview%20--%26gt%3B%20Reports%3A%20Retention%20Label%20Usage%2C%20Sensitivity%20Label%20Usage%2C%20Retention%20Label%20Changes%2C%20Label%20trends%20over%20the%20past%20X%20days%2C%20DLP%20Policy%20Matches%2C%20DLP%20Incidents%2C%20DLP%20false%20positives%20and%20overrides%2C%3C%2FSTRONG%3E%3C%2FEM%3E%3C%2FP%3E%3CP%3Eplus%26nbsp%3B%3C%2FP%3E%3CP%3Eb.%20those%20we%20have%20in%26nbsp%3B%3CEM%3E%3CSTRONG%3EMicrosoft%20Purview%20--%26gt%3B%20Reports%20--%26gt%3B%20Activity%20Explorer%20but%3CSTRONG%3E%3CFONT%20color%3D%22%23DF0000%22%3E%20for%20more%20than%2030%20days%2C%20for%20any%20date%20range%20we%20wish%20to%20pull%20the%20data%20for%20and%20have%20a%20report.%3C%2FFONT%3E%3C%2FSTRONG%3E%3C%2FSTRONG%3E%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20would%20like%20to%20know%20if%20with%20Microsoft%20Graph%20we%20can%20pulling%20this%20information%20via%20Graph%2C%20and%20then%20feed%20it%20into%20some%20PowerBi%20Dashboard.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20help%20or%20directions%20if%20you%20ever%20had%20such%20experience%2C%20solution%20is%20appreciated.%3C%2FP%3E%3CP%3EAli%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3372195%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAudit%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAudit%20Logs%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ECompliance%20Center%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EData%20Loss%20Prevention%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EGraph%20API%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESensitivity%20label%20policy%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESensitivity%20Lables%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Contributor

We have been using reports and dashboards in Microsoft Compliance Center. The big issue on those is that the data is only available and limited for 30 days.

 

We need to pull audit/compliance data such as those we have in https://compliance.microsoft.com/:

a. Microsoft Purview --> Reports: Retention Label Usage, Sensitivity Label Usage, Retention Label Changes, Label trends over the past X days, DLP Policy Matches, DLP Incidents, DLP false positives and overrides,

plus 

b. those we have in Microsoft Purview --> Reports --> Activity Explorer but for more than 30 days, for any date range we wish to pull the data for and have a report.

 

I would like to know if with Microsoft Graph we can pulling this information via Graph, and then feed it into some PowerBi Dashboard.

 

Any help or directions if you ever had such experience, solution is appreciated.

Ali

1 Reply
Afaik there are no Graph API endpoints for any of the above. You can get (some of) the corresponding events via the Management activities API and build your own reports.