Update approval email message to High Importance

Playbooks/Block-IPs-on-MDATP-Using-GraphSecurity/azuredeploy.json

@@ -15,7 +15,7 @@
       "type": "string"
     },
     "EmailApprovalContact": {
-      "defaultValue": "Email address of an SOC analyst who can approve IP address of an incident",
+      "defaultValue": "Email address of an SOC analyst who can approve to block IP address of an incident",
       "type": "string"
     }
   },
@@ -214,8 +214,8 @@
                   "inputs": {
                     "body": {
                       "Message": {
-                        "Body": "Please approve to block @{variables('IPAddress')}",
-                        "Importance": "Normal",
+                        "Body": "Please approve to block @{variables('IPAddress')} \nIncident case number: @{body('Alert_-_Get_incident')?['properties']?['CaseNumber']}",
+                        "Importance": "High",
                         "Options": "Approve, Reject",
                         "Subject": "Approval Request",
                         "To": "[parameters('EmailApprovalContact')]"