AZQR - no data to render

[sjswaby]

Hi,

Getting "Skipping ResourceTypes - no data to render" as the output from running against a subscription which we know has many resources. Permissions in Azure is "Reader", can see all resources via ARM. Using AzureCLI + Windows. Haven't had these issues with previous runs of AZQR.

Any assistance or advice appreciated :)

Thanks,
Sam

[cmendible]

Hello, what version are you running? azqr -v

[sjswaby]

Can't see anything obvious when we ran that, ran it again just now:

Debug
2025-03-13T15:54:14Z DBG resources | project id, subscriptionId, resourceGroup, location, type, name, sku.name, sku.tier, kind
2025-03-13T15:54:14Z INF Scanning subscriptions for Diagnostic Settings
2025-03-13T15:54:14Z INF Scanning subscriptions for Resource Count per Subscription and Type
2025-03-13T15:54:14Z DBG resources | summarize count() by subscriptionId, type | order by subscriptionId, type
2025-03-13T15:54:14Z INF Scanning subscriptions for Advisor Recommendations
2025-03-13T15:54:14Z DBG
AdvisorResources
| join kind=inner (
resourcecontainers
| where type == 'microsoft.resources/subscriptions'
| project subscriptionId, subscriptionName = name)
on subscriptionId
| project Type=type, SubscriptionId=subscriptionId, SubscriptionName=subscriptionName,
ResourceGroup = resourceGroup, Category = properties.category, Impact = properties.impact,
ImpactedField = properties.impactedField, ImpactedValue = properties.impactedValue,
Problem = properties.shortDescription.problem, ResourceId = properties.resourceMetadata.resourceId,
RecommendationTypeId = properties.recommendationTypeId

2025-03-13T15:54:14Z INF Scanning subscriptions for Defender Status
2025-03-13T15:54:14Z DBG
SecurityResources
| join kind=inner (
resourcecontainers
| where type == 'microsoft.resources/subscriptions'
| project subscriptionId, subscriptionName = name)
on subscriptionId
| where type == 'microsoft.security/pricings'
| project SubscriptionId = subscriptionId, SubscriptionName = subscriptionName, Name = name, Tier = properties.pricingTier

2025-03-13T15:54:14Z INF Scanning subscriptions for Defender Recommendations
2025-03-13T15:54:14Z DBG
SecurityResources
| where type == 'microsoft.security/assessments'
| where properties.status.code == 'Unhealthy'
| mvexpand Category = properties.metadata.categories
| extend
AssessmentId = id,
AssessmentKey = name,
ResourceId = properties.resourceDetails.Id,
ResourceIdsplit = split(properties.resourceDetails.Id, '/'),
RecommendationName = properties.displayName,
RecommendationState = properties.status.code,
ActionDescription = properties.metadata.description,
RemediationDescription = properties.metadata.remediationDescription,
RecommendationSeverity = properties.metadata.severity,
PolicyDefinitionId = properties.metadata.policyDefinitionId,
AssessmentType = properties.metadata.assessmentType,
Threats = properties.metadata.threats,
UserImpact = properties.metadata.userImpact,
AzPortalLink = tostring(properties.links.azurePortal)
| extend
ResourceSubId = tostring(ResourceIdsplit[2]),
ResourceGroupName = tostring(ResourceIdsplit[4]),
ResourceType = tostring(ResourceIdsplit[6]),
ResourceName = tostring(ResourceIdsplit[8])
| join kind=leftouter (resourcecontainers
| where type == 'microsoft.resources/subscriptions'
| project SubscriptionName = name, subscriptionId) on subscriptionId
| project SubscriptionId=subscriptionId, SubscriptionName, ResourceGroupName, ResourceType,
ResourceName, Category, RecommendationSeverity, RecommendationName, ActionDescription,
RemediationDescription, AzPortalLink, ResourceId

2025-03-13T15:54:14Z INF Generating Report: azqr_action_plan_2025_03_13_T155249.xlsx
2025-03-13T15:54:14Z INF Skipping ResourceTypes. No data to render
2025-03-13T15:54:14Z INF Skipping Advisor. No data to render
2025-03-13T15:54:14Z INF Skipping DefenderRecommendations. No data to render
2025-03-13T15:54:14Z INF Skipping Defender. No data to render
2025-03-13T15:54:14Z INF Skipping Costs. No data to render
2025-03-13T15:54:15Z INF Scan completed.

[cmendible]

Please run az logout and login again. Are you using a Service Principal or a user? Are you just running: azqr scan -s <subscription id> or are you using filters?

[sjswaby]

Running azqr scan -s '' --costs=false --debug

Tried this on different subscriptions and across more than one tenant.

[cmendible]

Just ran tests across tenants and subscriptions and could not repro.

Please double check the credentials and permissions. The user or service principal must be Reader on either subscription or management group scope.

[sjswaby]

Ok, got it working utilising cloud shell for the same tenant. My guess was that conditional access or 3rd party IDAM security was in the way and blocked me from my IP / CLI.

Thank you for helping and good to know cloud shell works just as good for future scenarios like this :)