MPARR New Setup Script

New capabilities was added to our MPARR_Setup script, in this case we can add the tasks under task scheduler for all our support scripts, and the most important one is related to sign digitally our MPARR scripts.

[@Unaragan]

is it possible to get the needed Information without Compliance Admin Role ? only with the Audit Log Viewer role?

[@kazdemos]

When you use the MPARR application capturing the data, to consume from Power BI, not admin roles are needed.
Exist 2 scripts that need elevated privileges to be executed, that permissions can be added to the Microsoft Entra App directly, or you need someone with Compliance Administrator role to execute those scripts, MPARR-LabelData.ps1 and MPARR-SITData.ps1. I'll share less privileges that can be used to execute those scripts.

[@samv5876]

Total amount of records returned : 0
No data returned from : DLP.All
No data was exported to Logs Analytics.
where is it checking for this information and where would I need to add dummy data in ? At the moment it doesnt create that table and the powerbi reports looks for it

[@kazdemos]

MPARR creates the tables when certain information is collected, in this case only if you have some DLP rule matches that table will get info and the table will be created.

[@samv5876]

@@kazdemos the issue is if no information in tenant and the table doesn’t create the template still looks for it then errors ?

[@kazdemos]

Please open an issue through GitHub page to have the capability to share images.

[@samv5876]

video on how we present to powerbi ?

[@kazdemos]

Hi @samv5876 can you please extend in your requirements.
In another session I explained how to build Power BI reports from scratch, you can see here ruclips.net/video/sSbyTf4UXVU/видео.html

[@samv5876]

Hi Kaz, are you contactable via teams by chance ?

[@kazdemos]

@@samv5876 you can find me on LinkedIn LinkedIn.com/in/profesorkaz

[@samv5876]

@@kazdemos got an error message with entra users i cant run the script on my demo tenant its fine but on a production environment it fails

[@kazdemos]

Can you please open an issue under GitHub page to share a screenshot about the error.

[@samv5876]

Checking PowerShell version... Passed!
Path 'D:\MPARR2\RMSLogs\' already exists
Calling MPARR-GetRMSData.ps1 script to get Users logs...
Starting script
Running.
Collector script execution
Completed !!!
PS D:\MPARR2>
doesnt seem to create an RMS log so suggests it doesnt run ? can you check this ?

[@kazdemos]

Can you validate if at least the scripts "MPARR-GetRMSData.ps1" and "MPARR-GetTrackingRMSData.ps1" are avaialble under the "ConfigFiles" folder? Additionally, more if you are using Windows Server, is recommended to sign the scripts.

[@samv5876]

@@kazdemos should we be running these scripts or what ?

[@kazdemos]

Those scripts are called in background, happens that the RMS API doesn't support with PowerShell 7, for that same reason the main script MPARR_RMSData call the other 2 scripts running it using PowerShell 5 to call that API.