In this article
Issue description
Prerequisites
Possible causes
Resolution
How to reach support
Related topics and articles
Issue description
When accessing Risk Detection reports for a configured cloud directory (Microsoft Entra ID) tenant in ADAudit Plus, the reports display No data available instead of showing risk events. This issue typically arises when the required integrations, permissions, or data synchronization settings are not properly configured, preventing ADAudit Plus from fetching risk detection logs from Entra ID.
Prerequisites
You must have administrator access to the Microsoft Entra ID portal.
The Microsoft Entra ID tenant must have an active Premium P2 license.
You must know the name of the application registered in Microsoft Entra ID for the integration.
Possible causes
The IdentityRiskEvent.Read.All Microsoft Graph API permission is missing or has not been granted admin consent for the registered application.
The Microsoft Entra ID tenant does not have an active Premium P2 license, which is required for risk detection events.
Resolution
Follow these steps to grant the necessary API permission in Microsoft Entra ID.
Go to the Microsoft Entra ID portal and sign in using your Microsoft account.
Select Microsoft Entra ID from the Azure services section.
From the left pane, navigate to Manage > App registrations.
Select your application under the Owned applications tab.
From the left pane, navigate to Manage > API permissions and click + Add a permission.
Select Microsoft Graph.
Click Application permissions as the type of permission required.
From the permissions list, select IdentityRiskEvent.Read.All.
Click Add permissions.
Click the Grant admin consent for <tenant name> button.
Click Yes to confirm the consent.
How to reach support
If the issue persists after confirming the license and API permissions, please contact our support team for further assistance.
Related topics and articles