Inconsistent Report Data
When I look at the Reports, Usage page, the OneDrive files chart shows Active Users 43 of 544, when I click on it the OneDrive Usage chart shows data as of yesterday and the last day shows Total Accounts 529 and Active Accounts 15. Does this inconsistent data occur for anyone else? Which is correct? On the OneDrive Usage page, the table is showing more Active Files than Files, which does not seem possible. One account shows 5 files and 36 Active Files, which does not make any sense to me. Anne Michels can you provide any insight?
Problem running the Windows Feature Update Device Readiness Intune Report
I have a custom Intune role for our support staff. I want them to be able to run the Feature Update Device Readiness report. When they click on the Select target OS link, it shows "No data to display", instead of the OS list. They are able to click on Select scope tag and see a list of scope tags. Is there a permission they need that I'm missing? Here is what I have assigned for the custom role. Audit data Read Corporate device identifiers Create Delete Read Update Device compliance policies Read View Reports Device Configurations Read View Reports Endpoint Analytics Read Endpoint protection reports Read Enrollment programs Create device Delete device Read device Sync device Assign Profile Read Profile Managed apps Read Managed devices Delete Read Set Primary user Update View reports Organizations Read Remote tasks Clean PC Collect diagnostics Enable Windows IntuneAgent Get Filevault key Manage shared device users Reboot now Reset passcode Retire Set device name Sync devices Wipe Roles ReadSharePoint Online issues today
It seems Today's issues in SPO are not only affecting the "Like" functionality described in the Message Center because I'm seeing problems when accessing to SharePoint Online Administration and also when trying to deploy stuff (provision site collections by using custom code). This is the message that I currently see in the message center...anyone having issues with SPO? Title: Can't use the 'Like' button User Impact: Users are unable to use the 'Like' button on SharePoint Online blog sites. Current status: We've determined that the initial fix contained a configuration issue when it was deployed, which prevented the updated code from executing as expected. We're developing a new fix and preparing to deploy it to the affected environment. Scope of impact: Customer reports indicate that many users are likely experiencing impact related to this event. Our analysis indicates that this problem potentially affects any users attempting to use the 'Like' button on SharePoint Online blog sites. Start time: Monday, October 10, 2016, at 6:00 PM UTC Preliminary root cause: A recent code fix intended to resolve an unrelated problem introduced a new code issue that impacted feedback options for SharePoint Online blog sites. Next update by: Friday, October 21, 2016, at 6:00 PM UTCUsage activity reports delegation to non-admin accounts (or billing admin) possible?
As we are managing tenants for our customers, we would like to provide them access to Office 365 Usage Activity reports so they are able to improve adoption. Currently usage reports are only visible to Global -. Exchange -, Sharepoint - and Skype admins (*). It would be nice if access to the usage activity reports could be delegated to the Billing Admin role for example. *: https://support.office.com/en-us/article/Activity-Reports-in-the-Office-365-admin-center-0d6dfb17-8582-4172-a9a9-aed798150263 Please vote for this feature request if you are facing the same issue at Office365 uservoice: https://office365.uservoice.com/forums/273493-office-365-admin/suggestions/19476202-activity-reports-permissions-not-just-for-admins
Sentinel Data Connector: Google Workspace (G Suite) (using Azure Functions)
I'm encountering a problem when attempting to run the GWorkspace_Report workbook in Azure Sentinel. The query is throwing this error related to the union operator: 'union' operator: Failed to resolve table expression named 'GWorkspace_ReportsAPI_gcp_CL' I've double-checked, and the GoogleWorkspaceReports connector is installed and updated to version 3.0.2. Has anyone seen this or know what might be causing the table GWorkspace_ReportsAPI_gcp_CL to be unresolved? Thanks!
Insecure Protocol Workbook
Greetings, maybe most orgs have already eliminated insecure protocols and this workbook is no longer functional? I have it added and it appears to be collecting but when I go to open the template it is completely empty. Is the Insecure Protocol aka IP still supported and if so is there any newer documentation than the blog from 2000 around it? I am hoping to identify ntlm by user and device as the domain controllers are all logging this and the MDI agents on them are forwarding this data to Defender for Identity and Sentinel.Fetching alerts from Sentinel using logic apps
Hello everyone, I have a requirement to archive alerts from sentinel. To do that I need to do the following: Retrieve the alerts from Sentinel Send the data to an external file share As a solution, I decided to proceed with using logic apps where I will be running a script to automate this process. My questions are the following: -> Which API endpoints in sentinel are relevant to retrieve alerts or to run kql queries to get the needed data. -> I know that I will need some sort of permissions to interact with the API endpoint. What type of service account inside azure should I create and what permissions should I provision to it ? -> Is there any existing examples of logic apps interacting with ms sentinel ? That would be helpful for me as I am new to Azure. Any help is much appreciated !
DLP Reports
Is there a way to create a report for DLP Alerts so I get a CSV file sent to me weekly? Right now its a manual report that I have to download. I don't see where I can schedule it. I would like to be able to send to my managers a file shows who on what day and what match policy matches were triggered.
