Forum Discussion
How to create a Playbook that sends an email to a user involved in an incident?
Hello everybody, I need to configure a Sentinel playbook to send emails to users when an incident is created regarding their account. I have created a playbook that uses Identity Protection inci...
Hey frank_df, we are also looking for similar requirement, did you able to achieve this, if you are please let us know the playbook configuration, we tried to pull AAD user id and accounts UPN suffix but its not reflecting the email address.
Prashali_Shinde
Yes, I achieved that!
Here is my current configuration:
NB: I added a condition because I had to send an email or another according to the UPN suffix. You can skip straight to the last step ("send an email").- Thank you so much frank_df , will try with this.
