Hello folks, Greetings!
Does anybody know what are those API permissions we need to provide while registering the MS Defender Hunting App in Entra ID, so that we can access all the functionalities of this Plugin in ICON workflow?
Your insights and suggestions are appreciated.
Thank You 
On the overview page for the extension there is a link to Microsoft that has a section for permissions.
You will want to use Application permissions.
| Permission type | Permission | Permission display name |
|---|---|---|
| Application | AdvancedHunting.Read.All | Run advanced queries |
| Delegated (work or school account) | AdvancedHunting.Read | Run advanced queries |
Hey Eric, thanks for your response.
I looked into Microsoft document you attached in the link. Sounds good for me.