Forum Discussion
"Block user in Azure AD" playbook action
Hi, I am creating some playbooks and would like to include an action where the user involved in the alert it blocked. I thought this was possible using Sentinel playbooks based on the image in thi...
Hi
Have you seen this play book?
https://github.com/Azure/Azure-Sentinel/tree/master/Playbooks/Block-AADUser
YOu can deploy it in your own environment
Rod_Trent
Microsoft
MicrosoftThijs Lecomte Good catch. This specific Playbook is located here: https://github.com/Azure/Azure-Sentinel/tree/master/Playbooks/Block-AADUser
You can use that as a template to determine how that step is accomplished or just use it as is.