История

Lior Tamir aad48299ca Update playbook trigger names		2022-02-22 17:02:56 +02:00
..
alert-trigger	Update playbook trigger names	2022-02-22 17:02:56 +02:00
incident-trigger	Update playbook trigger names	2022-02-22 17:02:56 +02:00
readme.md	Updating Deploy buttons and links part 1	2021-06-16 00:25:40 +00:00

readme.md

Confirm-AADRiskyUser

author: Nicholas DiCola

This playbook will set the Risky User property in AAD using Graph API.

Quick Deployment

Deploy with incident trigger (recommended)

After deployment, attach this playbook to an automation rule so it runs when the incident is created.

Learn more about automation rules

Deploy with alert trigger

After deployment, you can run this playbook manually on an alert or attach it to an analytics rule so it will rune when an alert is created.

Prerequisites

You will need to add the managed identity that is created by the Logic App to the Security Administrator role in Azure AD.

Screenshots

Incident Trigger

Alert Trigger