workflow

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


< 🏡home

Attribute Value
Type Playbook
Solution SAP
Source View on GitHub

⚠️ Not listed in Solution JSON: This content item was discovered by scanning the solution folder but is not included in the official Solution JSON file. It may be a legacy item, under development, or excluded from the official solution package.

Logic App Connectors

This playbook uses 3 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azuresentinel Managed 0 4
teams Managed 0 10
http Built-in 0 1
Action parameters (URLs, paths, function IDs)

azuresentinel (Managed)

Action Method Endpoint Other
Add_comment_to_incident_(true_positive) post /Incidents/Comment
Close_Sentinel_incident put /Incidents
Add_false-positive_comment_to_incident post /Incidents/Comment
Flag_false_positive put /Incidents

teams (Managed)

Action Method Endpoint Other
Reply_with_a_message_in_a_channel post /v1.0/teams/conversation/replyWithMessage/poster/Flow bot/location/@{encodeURIComponent('Channel')}
Reply_with_a_message_in_a_channel_2 post /v1.0/teams/conversation/replyWithMessage/poster/Flow bot/location/@{encodeURIComponent('Channel')}
Notify_impacted_colleague_working_with_SAP post /beta/teams/conversation/message/poster/Flow bot/location/@{encodeURIComponent('Chat with Flow bot')}
Reply_with_SAP_lock_message_in_channel post /v1.0/teams/conversation/replyWithMessage/poster/Flow bot/location/@{encodeURIComponent('Channel')}
Reply_with_true_positive_success post /v1.0/teams/conversation/replyWithMessage/poster/Flow bot/location/@{encodeURIComponent('Channel')}
Reply_to_Admins_with_lock_error_in_Channel post /v1.0/teams/conversation/replyWithMessage/poster/Flow bot/location/@{encodeURIComponent('Channel')}
Reply_with_false_positive_success post /v1.0/teams/conversation/replyWithMessage/poster/Flow bot/location/@{encodeURIComponent('Channel')}
Post_timeout_message_in_Channel post /beta/teams/conversation/message/poster/Flow bot/location/@{encodeURIComponent('Channel')}
Post_parsing_error_message_to_Logic_App_admin post /beta/teams/conversation/message/poster/Flow bot/location/@{encodeURIComponent('Chat with Flow bot')}
Post_processing_error_message_to_Logic_App_admin post /beta/teams/conversation/message/poster/Flow bot/location/@{encodeURIComponent('Chat with Flow bot')}

http (Built-in)

Action Method Endpoint Other
Block_User_via_SOAP_exposed_BAPI POST @{parameters('SOAPApiBasePath')}/sap-com:document:sap:rfc:functions:ZWS_BAPI_USER_LOCK:BAPI_USER_LOCKRequest?sap-client=@{variables('sap-client-id')}

Additional Documentation

📄 Source: Basic-SAPLockUser-STD/readme.md

Lock SAP User from Teams - Basic

< 🏡home

Basic Sentinel playbook with minimum integration effort for simple SAP user blocking on ERP via SOAP service anticipating Azure private VNet integration.

👨🏽‍🔧installation guide.

Step 🪂
Logic Apps Infrastructure Deploy to Azure
Logic Apps Connections Deploy to Azure
Logic Apps Standard Connections configuration 🔗link
Logic Apps Standard workflow 🔗link
Logic Apps Standard workflow parameters 🔗link

Required Azure Roles

Role Name Resource Type Scope Purpose
Microsoft Sentinel Responder At least resource group where Sentinel lives Required for Incident state update

Learn more about Microsoft Sentinel built-in roles here and Azure built-in roles here.

🔝


Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Playbooks · Back to SAP