Playbook Error: Failed to get HTTP response

Brass Contributor

Hello,

I am currently deploying 'ScheduledIncidentEmail' from 

https://github.com/rod-trent/SentinelPlaybooks/tree/master/ScheduledIncidentEmail

But the I am getting the following error.

 

Usama_Saleem_0-1693464695643.png

Although I have owner account. Also I don't understand what does it mean by 'Please refresh your credentials'

1 Reply
By what i can read it seems you have a read permission error so the playbook more then likely hasnt been assigned read access to your log analytics / Microsoft Sentinel workspace

To complete this follow the following steps
Select your Log analytics workspace (same name as your Microsoft Sentinel workspace)
Go into IAM section
Add Read against your Logic app name

Logic Apps have a managed identity built into them if it has been enabled, if not perform these steps

Seach for your Logic App (ScheduledIncidentEmail)
in the Logic app, find the settings section and select identity
click the radio button to on for System Assigned
Repeat steps above