Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,984 questions
MS Defender - How to manage Tenant Allow/Block Lists with graph api
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 63%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EOD%3C/text%3E%3C/svg%3E)
Omer Dital
5
Reputation points
Hi, I'm trying to create an integration to block certain URLs on Microsoft Defender with the Graph API.
After looking into the documentation, I found this endpoint: https://learn.microsoft.com/en-us/graph/api/tiindicators-post?view=graph-rest-beta&tabs=http, is it the correct one to use?
I also saw that tiindicators are deprecated, what is the new approach then?
thank you!
{count} vote
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 90%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
Pauline Mbabu 405 Reputation points Microsoft Employee2024-07-18T09:42:55.4+00:00 Hello Omer,
Based on our research the feasible way to manage Tenant Allow/Block List is by using PowerShell Scripts. This is documented here https://learn.microsoft.com/en-us/defender-office-365/tenant-allow-block-list-about.
The tiIndicator entity is deprecated and will be removed by April 2026. -
Omer Dital 5 Reputation points
2024-09-15T08:05:36.27+00:00 Hi @Pauline Mbabu @Pauline Mbabu , thank you for the response.
Is there another way (not specifically TreatIndicators) to pass applications\urls to Block on Microsoft Defender via API?
I want to be able to send a list of urls\domains from a web application via API to be blocked on Microsoft Defender.
Sign in to comment
Sign in to answer