About BI for Defender¶
BI for Defender is a Power BI template app that connects to Microsoft Defender for Endpoint via the Microsoft Graph Security API. No agents on endpoints, no vendor portal — your data stays in your Power BI workspace, governed by your Microsoft 365 tenant policies.
Pre-built dashboards cover threat detection and response, device security posture, application control, and vulnerability management. Track alert severity distribution, detection sources, security configuration scores, exposure levels, and CVE remediation progress across all Defender-managed devices.
How the docs are organized¶
- Install Guide — required for every customer. Install the app from the Microsoft Marketplace, create your Entra app registration, configure your semantic model, and set up data sync. Once the Setup Guide is done, you have a working set of dashboards.
- Advanced Configuration — optional. Notes on Microsoft licensing prerequisites that affect specific dashboards (notably, Browser Extension Inventory requires the Microsoft Defender Vulnerability Management add-on). The product works fine without these — affected dashboards simply show no data until the matching Microsoft entitlement is in place.
- Admin Guide — administration and troubleshooting: backing up custom reports, performing upgrades, managing workspaces, customizing templates, and resolving common issues.
- User Guide — training materials for the people in your organization who use the reports day to day. Dashboard navigation, drill-throughs, exporting, and interactive walkthroughs.
- What's New — release notes for every version, so you know exactly what changed before upgrading.
Have a question? Ask Pax.¶
Pax is our AI-powered documentation assistant. Click the chat icon in the bottom-right corner to ask a question — Pax can help you find the right guide, troubleshoot setup issues, or explain how a feature works.