Provide MS Sentinel explicit permissions to run playbooks via ARM

Occasional Visitor



Simple ask.


Using ARM to add a template to a new install of Sentinel (LA workspace, sentinel, analytics, workbooks and playbooks all installed in one go) I can't figure out how to assign the permissions required as part of the initial ARM install.


For the GUI it's simple enough - Sentinel > Settings > Settings > Playbook Permissions > Configure permissions > select RG and apply.


How can this be replicated using ARM only - no PS and no GUI -- ideally i would like the ARM template to be a one shot.


Any help is appreciated.




0 Replies