Blog Post

Microsoft Sentinel Blog
3 MIN READ

What’s new: Managed Identity for Azure Sentinel Logic Apps connector

liortamir's avatar
liortamir
Former Employee
Jan 17, 2021
Now available: Grant permissions directly to a playbook to operate on Azure Sentinel, instead of creating additional identities.    Azure Sentinel Logic Apps connector is the bridge between Senti...
Updated Jan 17, 2021
Version 2.0
playbooks
what's new
liortamir's avatar
Former Employee
Joined February 07, 2020
View Profile
Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

When evaluating various solutions, your peers value hearing from people like you who’ve used the product. Review Microsoft Sentinel by filling out a Gartner Peer Insights survey and receive a $25 USD gift card (for customers only). Here are the Privacy/Guideline links: Microsoft Privacy Statement, Gartner’s Community Guidelines & Gartner Peer Insights Review Guide.

Joseph-Abraham's avatar
Joseph-Abraham
Copper Contributor
Jan 18, 2021

liortamir thanks for sharing...tested and confirmed 🙂

 

One pain point with regards to logic apps is that we have to renter the common details for every action.

Example we have to enter the Subscription Id, Resource Group, Workspace Id, Alert Id for every action connector.

 

There should be the concept of Assets like in Splunk Phantom

https://docs.splunk.com/Documentation/Phantom/4.10/PlaybookAPI/AppsAssets

 

These Assets need to be created only once and store such repeated connection details and we can chose the appropriate one from a dropdown in the actions.