Dataverse: Send notification to manager

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


This playbook can be triggered when a Microsoft Sentinel incident is raised and will automatically send an email notificiation to the manager of the affected user entitites. The Playbook can be configured to send either to the Dynamics 365 manager, or using the manager in Office 365.

Attribute Value
Type Playbook
Solution Microsoft Business Applications
Source View on GitHub

Logic App Connectors

This playbook uses 5 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azuresentinel Managed 1 3
office365 Managed 1 0
office365_1 Managed 0 5
office365users Managed 1 1
http Built-in 0 2
Action parameters (URLs, paths, function IDs)

azuresentinel (Managed)

Action Method Endpoint Other
Entities_-_Get_D365_Accounts post /entities/account
Entities_-_Get_O365_Accounts post /entities/account
Entities_-_Get_Missing_Instance_Accounts post /entities/account

office365_1 (Managed)

Action Method Endpoint Other
Send_email_to_D365_manager post /v2/Mail
Send_email_to_fallback_mailbox_(D365) post /v2/Mail
Send_email_to_O365_manager post /v2/Mail
Send_email_to_fallback_mailbox_(O365) post /v2/Mail
Send_email_to_fallback_mailbox_(Missing_Instance) post /v2/Mail

office365users (Managed)

Action Method Endpoint Other
Get_manager_(V2) get /codeless/v1.0/users/@{encodeURIComponent(concat(items('For_each_O365_account')?['accountName'],'@',items('For_each_O365_account')?['upnSuffix']))}/manager

http (Built-in)

Action Method Endpoint Other
Get_D365_User GET @{variables('InstanceUrl')}api/data/v9.2/systemusers?$select=_parentsystemuserid_value,windowsliveid&$filter=windowsliveid eq '@{concat(items('For_each_D365_account')?['accountName'],'@',items('For_each_D365_account')?['upnSuffix'])}'
Get_Manager GET @{variables('InstanceUrl')}api/data/v9.2/systemusers?$filter=_parentsystemuserid_value eq @{body('Get_D365_User')['value'][0]?['_parentsystemuserid_value']}&$select=firstname,lastname,internalemailaddress

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Playbooks · Back to Microsoft Business Applications