MicrosoftI don't know why the documents around setting up the MDTI solution and using the playbooks are so bad. So you can get the threat feed setup with basically a few clicks and you have the connector working, then to use the playbooks you need to have MDTI Premium license and the MDTI API license?
In the admin center those come up as $50k per year, each.
I feel like I am missing something here.
I need to know the permissions that app registration requires in Entra ID and also if I really need those two expensive licenses for just a few playbooks.
