si-perm-1004 SecurityInsight may not read the security scores
What it means
SecurityInsight may not read your tenant's Microsoft Secure Score or Defender exposure score yet, so the status report carries no scores. Nothing SecurityInsight collects is affected. Grant the two read-only permissions with the setup script.
| Code | si-perm-1004 |
|---|---|
| Who acts | You |
| Action | You act: follow the steps below. |
What to do
- You: Open Get Started > Permissions: it lists Microsoft Graph SecurityEvents.Read.All and WindowsDefenderATP Score.Read.All with the two lines to run (Grant-SIIdentity.ps1 for the managed identity, Grant-SIIdentity.ps1 -AppId for an app registration).
- You: An admin who can give admin consent (Privileged Role Administrator or Global Administrator) runs them; the next hourly status report carries the scores.
Written by the SecurityInsight team; Invardia publishes it. Quote the code when you contact support@invardia.com. · All SecurityInsight error codes