Notify-InsiderRiskTeam

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


This playbook should be configured as an automation action with the Insider Risk Management Analytics Rules. Upon triggering an Analytic Rule, this playbook captures respective details and both emails and posts a message in a Teams chat to the Insider Risk Management team.

Attribute Value
Type Playbook
Solution MicrosoftPurviewInsiderRiskManagement
Source View on GitHub

Logic App Connectors

This playbook uses 3 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azuresentinel Managed 1 0
office365 Managed 1 1
teams Managed 1 1
Action parameters (URLs, paths, function IDs)

office365 (Managed)

Action Method Endpoint Other
Send_an_email_(V2)_2 post /v2/Mail

teams (Managed)

Action Method Endpoint Other
Post_message_in_a_chat_or_channel post /beta/teams/conversation/message/poster/Flow bot/location/@{encodeURIComponent('Channel')}

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Playbooks · Back to MicrosoftPurviewInsiderRiskManagement