❌

Reading view

There are new articles available, click to refresh the page.

Unable to use Playbook

I for the life of me cannot figure out why my Playbook is visible in the Defender portal under Sentinel Automation, but I am unable to use it in any automation rules. Based on the documentation url listed under the grayed out Playbook, I have added the permissions for the service principal. The workspace lives in the same subscription under a different resource group than the Teams notification Playbook I am trying to configure. Has anyone ran into this issue before? I am new to Sentinel in general so I did not get to experience the old location in Azure as it now redirects to the Defender portal. It also seems like most of Microsoft’s current documentation refers to the β€œold” way of configuring playbooks in Azure.

submitted by /u/NoPatience4437
[link] [comments]
❌