История

Lior Tamir 41b497012a Last update time equal to pp start time All templates that appear from day 1 will be affected. Next templates will be uploaded with new times of upload		2021-07-15 18:37:10 +03:00
..
alert-trigger	Adding Tags for Playbook Gallery	2021-06-16 16:12:28 +00:00
incident-trigger	Last update time equal to pp start time	2021-07-15 18:37:10 +03:00
readme.md	Updating Deploy buttons and links part 1	2021-06-16 00:25:40 +00:00

readme.md

Dismiss-AADRiskyUser

author: Nicholas DiCola

This playbook will dismiss the Risky User property in AAD using Graph API.

Quick Deployment

Deploy with incident trigger (recommended)

After deployment, attach this playbook to an automation rule so it runs when the incident is created.

Learn more about automation rules

Deploy with alert trigger

After deployment, you can run this playbook manually on an alert or attach it to an analytics rule so it will run when an alert is created.

Prerequisites

You will need to add the managed identity that is created by the Logic App to the Security Administrator role in Azure AD.

Screenshots

Incident Trigger

Alert Trigger