Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
< 🏡home
| Attribute | Value |
|---|---|
| Type | Playbook |
| Solution | SAP |
| Source | View on GitHub |
⚠️ Not listed in Solution JSON: This content item was discovered by scanning the solution folder but is not included in the official Solution JSON file. It may be a legacy item, under development, or excluded from the official solution package.
This playbook uses 3 Logic App connectors / built-in actions:
| Connector / Action | Type | Connections | Actions |
|---|---|---|---|
azuresentinel |
Managed | 0 | 4 |
teams |
Managed | 0 | 10 |
http |
Built-in | 0 | 1 |
azuresentinel (Managed)| Action | Method | Endpoint | Other |
|---|---|---|---|
| Add_comment_to_incident_(true_positive) | post | /Incidents/Comment |
— |
| Close_Sentinel_incident | put | /Incidents |
— |
| Add_false-positive_comment_to_incident | post | /Incidents/Comment |
— |
| Flag_false_positive | put | /Incidents |
— |
teams (Managed)| Action | Method | Endpoint | Other |
|---|---|---|---|
| Reply_with_a_message_in_a_channel | post | /v1.0/teams/conversation/replyWithMessage/poster/Flow bot/location/@{encodeURIComponent('Channel')} |
— |
| Reply_with_a_message_in_a_channel_2 | post | /v1.0/teams/conversation/replyWithMessage/poster/Flow bot/location/@{encodeURIComponent('Channel')} |
— |
| Notify_impacted_colleague_working_with_SAP | post | /beta/teams/conversation/message/poster/Flow bot/location/@{encodeURIComponent('Chat with Flow bot')} |
— |
| Reply_with_SAP_lock_message_in_channel | post | /v1.0/teams/conversation/replyWithMessage/poster/Flow bot/location/@{encodeURIComponent('Channel')} |
— |
| Reply_with_true_positive_success | post | /v1.0/teams/conversation/replyWithMessage/poster/Flow bot/location/@{encodeURIComponent('Channel')} |
— |
| Reply_to_Admins_with_lock_error_in_Channel | post | /v1.0/teams/conversation/replyWithMessage/poster/Flow bot/location/@{encodeURIComponent('Channel')} |
— |
| Reply_with_false_positive_success | post | /v1.0/teams/conversation/replyWithMessage/poster/Flow bot/location/@{encodeURIComponent('Channel')} |
— |
| Post_timeout_message_in_Channel | post | /beta/teams/conversation/message/poster/Flow bot/location/@{encodeURIComponent('Channel')} |
— |
| Post_parsing_error_message_to_Logic_App_admin | post | /beta/teams/conversation/message/poster/Flow bot/location/@{encodeURIComponent('Chat with Flow bot')} |
— |
| Post_processing_error_message_to_Logic_App_admin | post | /beta/teams/conversation/message/poster/Flow bot/location/@{encodeURIComponent('Chat with Flow bot')} |
— |
http (Built-in)| Action | Method | Endpoint | Other |
|---|---|---|---|
| Block_User_via_SOAP_exposed_BAPI | POST | @{parameters('SOAPApiBasePath')}/sap-com:document:sap:rfc:functions:ZWS_BAPI_USER_LOCK:BAPI_USER_LOCKRequest?sap-client=@{variables('sap-client-id')} |
— |
📄 Source: Basic-SAPLockUser-STD/readme.md
< 🏡home
Basic Sentinel playbook with minimum integration effort for simple SAP user blocking on ERP via SOAP service anticipating Azure private VNet integration.
👨🏽🔧installation guide.
| Step | 🪂 |
|---|---|
| Logic Apps Infrastructure | |
| Logic Apps Connections | |
| Logic Apps Standard Connections configuration | 🔗link |
| Logic Apps Standard workflow | 🔗link |
| Logic Apps Standard workflow parameters | 🔗link |
| Role Name | Resource Type Scope | Purpose |
|---|---|---|
| Microsoft Sentinel Responder | At least resource group where Sentinel lives | Required for Incident state update |
Learn more about Microsoft Sentinel built-in roles here and Azure built-in roles here.
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊