Add Permissions to the Application - Defender for Endpoint

This document is under construction. Please excuse our dust.

The application you created in the previous section requires additional API permissions to access Defender for Endpoint.

Step 1:

• Sign into your Azure account.

• Go to the App you created on Register Epiphany as an Application in Azure and navigate to API permissions.

  

Step 2:

• Select Add a permission

• Select APIs my organization uses

• In the search box, type WindowsDefenderATP.

• Select WindowsDefenderATP.

Step 3:

• Select the following permissions:

  • Machine.Read.All

  • User.Read.All

  • Alert.Read.All

  • Software.Read.All

  • Vulnerability.Read.All

• Select Add permissions

Step 4:

Every time you add a permission, you must select Grant consent for the new permission to take effect.

• Select Grant admin consent for [Application Name]