Gov dashboard is not retrieving policy or securescore information

[thecloudman]

IS there a specific role in AAD the account signing into the custom connector requires to get Azure policy information and Secure Score information? My installation is logging in but is not retrieving any policy, secure score or resources from Azure.

[DrDonoso]

Hello,

If the user can see the policies in Azure, you should be able to see it in the Dashboard. Any role with reader permissions can read the policies.

[thecloudman]

Hi, I have Global Reader but was only able to get one policy from one subscription. Seems like the connector isn’t fetching all subscriptions when connecting and only connecting to the first subscription it reads. From: DrDonoso ***@***.***> Sent: Wednesday, 1 February 2023 1:07 AM To: Azure/CCOInsights ***@***.***> Cc: thecloudman ***@***.***>; Author ***@***.***> Subject: Re: [Azure/CCOInsights] Gov dashboard is not retrieving policy or securescore information (Discussion #305) Hello, If the user can see the policies in Azure, you should be able to see it in the Dashboard. Any role with reader permissions as Global Reader can read the policies. — Reply to this email directly, view it on GitHub, or unsubscribe. You Hello, If the user can see the policies in Azure, you should be able to see it in the Dashboard. Any role with reader permissions as Global Reader can read the policies. — Reply to this email directly, view it on GitHub<https://urldefense.com/v3/__https:/github.com/Azure/CCOInsights/discussions/305*discussioncomment-4831004__;Iw!!FOPJs41IVg!jjmz0ob9Taes8fxDmIPJlOYOWSOV0oLkcLio57RNXFT4wHjfGMBrRMkJRBT4mVgTldQCMJYPjpx8EgcioRYUOo74MwG4A1d6$>, or unsubscribe<https://urldefense.com/v3/__https:/github.com/notifications/unsubscribe-auth/AG3DKGS6HYDC4EHDG5JVBZLWVETCRANCNFSM6AAAAAAUA5ZCMM__;!!FOPJs41IVg!jjmz0ob9Taes8fxDmIPJlOYOWSOV0oLkcLio57RNXFT4wHjfGMBrRMkJRBT4mVgTldQCMJYPjpx8EgcioRYUOo74M9qHSIni$>. You are receiving this because you authored the thread.Message ID: ***@***.******@***.***>> IMPORTANT INFORMATION: This email is from Australian Retirement Trust Pty Ltd (ABN 88 010 720 840; AFSL 228975) or one of its wholly owned subsidiaries - Sunsuper Financial Services Pty Ltd (ABN 50 087 154 818; AFSL 227867) or Precision Administration Services Pty Ltd (ABN 47 098 977 667; AFSL 246604). It may be confidential or privileged. If you do not wish to receive future e-mail messages please send an e-mail to ***@***.*** with the subject line UNSUBSCRIBE. Our full email footer is available at https://www.australianretirementtrust.com.au/transmission-disclaimer For ratings and awards information refer to https://www.australianretirementtrust.com.au/awards

[DrDonoso]

Hello,

The dashboard is only fetching data from all the subscriptions to which the user has access.

• Can you see all the subscriptions in the subscription dashboard?
• Can you access the other subscriptions and see the data via the portal?
• Do the other subscriptions belong to the same or a different tenant?

Thanks.

[thecloudman]

Hello, I have three tenants but in this case I am only signing into one tenant with 9 subscriptions. I can see all the subscriptions and all resources in them from the Azure portal. May I suggest, possibly having a login option that request the Enrolment ID as part of the sign in process? Thanks From: DrDonoso ***@***.***> Sent: Friday, 3 February 2023 8:31 PM To: Azure/CCOInsights ***@***.***> Cc: thecloudman ***@***.***>; Author ***@***.***> Subject: Re: [Azure/CCOInsights] Gov dashboard is not retrieving policy or securescore information (Discussion #305) Hello, The dashboard is only fetching data from all the subscriptions to which the user has access. Can you see all the subscriptions in the subscription dashboard? Can you access the other subscriptions and see the data via the portal? Do Hello, The dashboard is only fetching data from all the subscriptions to which the user has access. * Can you see all the subscriptions in the subscription dashboard? * Can you access the other subscriptions and see the data via the portal? * Do the other subscriptions belong to the same or a different tenant? Thanks. — Reply to this email directly, view it on GitHub<https://urldefense.com/v3/__https:/github.com/Azure/CCOInsights/discussions/305*discussioncomment-4860786__;Iw!!FOPJs41IVg!lKIOMgtxwq-ZFc8F3l_D45L6Kas_QrzG8omIm7gszwucf4wp4pHMN9BbdizYz87nfwYGapcrKOcwWUMyJEgWT6ZQZwqDmj-5$>, or unsubscribe<https://urldefense.com/v3/__https:/github.com/notifications/unsubscribe-auth/AG3DKGVGIDKMWOSZCGS2KTTWVTM7HANCNFSM6AAAAAAUA5ZCMM__;!!FOPJs41IVg!lKIOMgtxwq-ZFc8F3l_D45L6Kas_QrzG8omIm7gszwucf4wp4pHMN9BbdizYz87nfwYGapcrKOcwWUMyJEgWT6ZQZ9gw13Kd$>. You are receiving this because you authored the thread.Message ID: ***@***.******@***.***>> IMPORTANT INFORMATION: This email is from Australian Retirement Trust Pty Ltd (ABN 88 010 720 840; AFSL 228975) or one of its wholly owned subsidiaries - Sunsuper Financial Services Pty Ltd (ABN 50 087 154 818; AFSL 227867) or Precision Administration Services Pty Ltd (ABN 47 098 977 667; AFSL 246604). It may be confidential or privileged. If you do not wish to receive future e-mail messages please send an e-mail to ***@***.*** with the subject line UNSUBSCRIBE. Our full email footer is available at https://www.australianretirementtrust.com.au/transmission-disclaimer For ratings and awards information refer to https://www.australianretirementtrust.com.au/awards

[DrDonoso]

In the case you want to search in another tenant, you need a delegate resource management.
https://learn.microsoft.com/en-us/azure/lighthouse/how-to/view-manage-customers