Incident comments from service principals

%3CLINGO-SUB%20id%3D%22lingo-sub-1255455%22%20slang%3D%22en-US%22%3EIncident%20comments%20from%20service%20principals%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1255455%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMinor%20question%2Fsuggestion%2C%20but%3A%20when%20using%20a%20service%20principal%20connection%20to%20Sentinel%20in%20a%20playbook%20and%20writing%20comments%20in%20incidents%2C%20they%20show%20up%20as%20%22Comment%20created%20from%20external%20application%22.%20Shouldn't%20it%20show%20the%20displayname%20of%20the%20connection%2C%20like%20%22Comment%20created%20from%20%7Bconnection%20display%20name%7D%22%3F%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22wadstromdev_0-1585225928169.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F179703i92CE80DB4BD7989B%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22wadstromdev_0-1585225928169.png%22%20alt%3D%22wadstromdev_0-1585225928169.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22wadstromdev_1-1585226088166.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F179704i72BCB83FE2A03351%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22wadstromdev_1-1585226088166.png%22%20alt%3D%22wadstromdev_1-1585226088166.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3EAnton%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1301038%22%20slang%3D%22en-US%22%3ERe%3A%20Incident%20comments%20from%20service%20principals%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1301038%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F573665%22%20target%3D%22_blank%22%3E%40wadstromdev%3C%2FA%3E%26nbsp%3B%3A%20feature%20requests%20and%20enhancements%20are%20best%20suited%20to%20our%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ffeedback.azure.com%2Fforums%2F920458-azure-sentinel%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%20data-cke-saved-href%3D%22https%3A%2F%2Ffeedback.azure.com%2Fforums%2F920458-azure-sentinel%22%3EUser%20voice.%3C%2FA%3E%3C%2FP%3E%0A%3CP%3EAnyways%2C%20I%20am%20forwarding%20the%20comment%20to%20the%20relevant%20engineering%20team.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1305413%22%20slang%3D%22en-US%22%3ERe%3A%20Incident%20comments%20from%20service%20principals%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1305413%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F293879%22%20target%3D%22_blank%22%3E%40Ofer_Shezaf%3C%2FA%3E%26nbsp%3BAwesome%2C%20thanks.%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fhtml%2Fimages%2Femoticons%2Fstareyes_40x40.gif%22%20alt%3D%22%3Astareyes%3A%22%20title%3D%22%3Astareyes%3A%22%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi,

 

Minor question/suggestion, but: when using a service principal connection to Sentinel in a playbook and writing comments in incidents, they show up as "Comment created from external application". Shouldn't it show the displayname of the connection, like "Comment created from {connection display name}"?

wadstromdev_0-1585225928169.png

wadstromdev_1-1585226088166.png

 

Thanks,

Anton

 

2 Replies

@wadstromdev : feature requests and enhancements are best suited to our User voice.

Anyways, I am forwarding the comment to the relevant engineering team.

@Ofer_Shezaf Awesome, thanks. :stareyes: