Security Incident Visibility
Microsoft Graph Permission:
SecurityIncident.Read.All
This allows us to read security incidents.
We use it to review incidents generated by Microsoft security products, understand current threats, and correlate security findings with configuration and identity data.
This is important because incidents show where security tools have detected suspicious or harmful activity. Reading them helps prioritize remediation and client reporting.
Service Health Visibility
Microsoft Graph Permission:
ServiceHealth.Read.All
This allows us to read Microsoft 365 service health information.
We use it to understand whether Microsoft-reported service issues may be affecting the client's environment.
This is important because service outages or advisories can explain user impact, failed checks, or temporary changes in service behavior.