Send Teams Adaptive Card on incident creation

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Content Index

---

This playbook will send Microsoft Teams Adaptive Card on incident creation, with the option to change the incident's severity and/or status.

Attribute	Value
Type	Playbook
Solution	Teams
Source	View on GitHub

Additional Documentation

📄 Source: Send-Teams-adaptive-card-on-incident-creation/readme.md

Send-Teams-adaptive-card-on-incident-creation

Author: Benjamin Kovacevic

This playbook will send Microsoft Teams Adaptive Card on incident creation, with the option to change the incident's severity and/or status.

Prerequisites

1. Get Teams Group ID and Teams Channel ID. (instructions available on - https://www.linkedin.com/pulse/3-ways-locate-microsoft-team-id-christopher-barber-/). It is possible to choose Teams group and channel after deployment as well.

Quick Deployment

Deploy with incident trigger

After deployment, attach this playbook to an automation rule so it runs when the incident is created.

Learn more about automation rules

Post-deployment

1. Assign Microsoft Sentinel Responder role to the Playbook's Managed Identity
2. Authorize Microsoft Teams connector

If the Playbook is Grayed Out, Follow These Steps

1. Navigate to Microsoft Sentinel → Settings → Settings
2. Scroll down to the Playbook permissions section
3. Click the Configure permissions button
4. In the Manage permissions side panel: - Under the Browse tab, search and select the Resource Group that contains your Logic App Playbook
5. Click Apply
6. Return to your Automation Rule and try adding the playbook again – it should now be selectable (no longer grayed out)

Screenshots

Incident Trigger

Teams Notification

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Playbooks · Back to Teams