Forum Discussion
andrew_bryant
Apr 25, 2019Brass Contributor
AzureAD group membership as a condition
I am trying to create a playbook that checks a user against an AzureAD group. If the user is a member of the group it will perform one action (open ticket in service now) and if they are not a membe...
andrew_bryant
May 10, 2019Brass Contributor
Interestingly, when I switched the action from querying the alert ID with log analytics to getting the account name from the sentinel alert it allowed me to create the condition under check group membership without putting it in its own for each loop. It wasn't allowing me to do that before. So now I can just create the condition to check whether the body equals the group ID. Tested it out and it works.
Thanks,
Ofer_Shezaf
Microsoft
May 12, 2019
Good to know. My guess is that the challenge is all JSON transformation. We need to learn more about Logic App JSON handling. We will share our findings.
~ Ofer