Forum Discussion
Inconsistent entity information
I'm trying to use a playbook trigged by an analytics rule to automate sending an approval email for things like a new device being registered to a user or MFA settings being changed. When the playboo...
You dont mention which rule / data table. But I know we sometimes have had to fix certain Rules to validate the entity information to make it more consistent, for automations to work properly.
https://learn.microsoft.com/en-gb/azure/active-directory/fundamentals/security-operations-user-accounts#accounts-not-following-naming-policies
There is some guidance and Rules for this- It seems more like a timing issue of some sort, I have seen different entity information from the exact same account and same rule.
- In that case maybe the rule can be improved, is it a rule that is using a legacy schema item, so you need to choose the newer column, or can you enhance the entity when you see a malformed UPN?
