Flow based on Cloud App Security

[GPD]

Hi I am trying to create the flow based on the Alerts raised on Cloud App Security.

Goal is 

When the alert Generated for specific policy in Cloud App> it should check the condition based on UPN suffix> send email if found upn suffix. It says your flow ran successfully but shows this 

Below is the actual flow created

Could anyone please help to get this sorted out

[v-litu-msft]

Hi @GPD,

So your question is that when the UPN suffix is found, the condition still returns false, right? 

Can you share an example of your UPN suffix (you can make one up)? 

Or tell us the data type of the UPN suffix.

Best Regards,
Community Support Team _ Lin Tu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[GPD]

@v-litu-msft Flow based on Cloud App Security 

I have replied twice but not able to see my response on your reply, is there anything that i need to mentioned in order to get all the post visible?

[GPD]

@v-litu-msft Flow based on Cloud App Security 

Finally able to see my reply on the post, adding my answer to your question again

So your question is that when the UPN suffix is found, the condition still returns false, right? Yes, The goal is to send an email if the FLow matches the mentioned UPN suffix else ignore the alert

Can you share an example of your UPN suffix (you can make one up)? xyz.company.com, abc.company.com

[v-litu-msft · Accepted solution]

Hi @GPD,

It seems that you are tring to insert screenshot into your post, You could click the camera button to insert images.

You could add a compose action between the condition to check the UPNSuffix value, if it is a string, please let me know that:

Best Regards,
Community Support Team _ Lin Tu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[v-litu-msft · Accepted solution]

Hi @GPD,

This issue is caused by the structure of Apply to each action.

This is a document about the duration of Approval request:

https://docs.microsoft.com/en-us/power-automate/limits-and-config#run-duration-and-retention

If one of the approvers not respond, the Start and wait for approval will pending for 30 days. 30 days later, it will continue to send the next approver approval request.

So, you should open the Concurrency Control to send the three approval at the same time:

Best Regards,
Community Support Team _ Lin Tu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[GPD]

@v-litu-msft Flow based on Cloud App Security 

Finally, it worked partially and how I still do not know, what went wrong previously don't know. I added the compose function as you advised though was not able to place properly. I tried to test the flow with previously failed alerts and it ran successfully, I was able to see the alert got resolved on Cloud App Security Portal but I have not received the email, though I could see the composed email in the test result. Please advise on this. Current Flow is like this.

Thanks and Regards