AAD Risky User Playbook Authorization Reqest Denied

[jbender]

Hello,

New to Azure Sentinel, setting up the AAD Risky User Playbook.  I did the app registration.  Not sure how to connect the registration to Playbook.  When I ran the playbook I got the following error:

Does anyone know what the issue may be?  Thanks for your help.  --James

[#2]

What permissions did you provide to the app registration? Can you provide us a screenshot

[#3]

@Thijs Lecomte 

Here you go sir.

[#4]

Permissions look okay to me! You have configuration authentication within that HTTP action in the Playbook? Could you share it (with the secret removed ofcourse)

[#5]

Is this what you want to see?

@Thijs Lecomte 

[#6]

Have you given the Managed Identity the correct permissions/role?
Right now you are not utilizing the app registration you showed in a previous step.
You should either:
- Provide the correct permissions to the Managed Identity (https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/how-to-ma...)
- Use the app registration for authentication (use the Active Directory OAuth authentication option)

[#7]

Thanks, let me make some changes and try it out.