Forum Discussion
"Authorization failed" error for Logic app writing a comment to Sentinel Incident
I have created a managed identity named id-sentinel-playbook that is used in 2 logic apps. Both the logic apps retrieve information from different external apis and writes the results as comments int...
I have the same issue.
What I've found is this Github issue comment saying "User assigned managed identity is not supported for Sentinel Playbooks"
https://github.com/Azure/Azure-Sentinel/issues/4227#issuecomment-1074018424
The workaround we have is calling the REST API directly, using managed identity authentication.