cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
cstack
Frequent Visitor

Cloud app security Playbook to Power Automate - details

In Cloud App Security I have routed alerts to Teams with the policy notification feature and it posts a nice detailed message with links back to the alert in cloud app security.  I want to instead send the alert to Power Automate and create a filter and some actions including posting to Teams but only if the alert meets my filter conditions.  I can get this to work BUT I cannot seem to get the alert details.  The alert if for New Group Created and I am unable to get the actual detail with the group name like I get if I let Cloud App Security post directly to Teams via a channel email address.  I attached what the alert looks like if I do  not use power automate and have it post directly from Cloud App Security.  Anyone know how I can get the same info into my Flow so it posts the same info to Teams?  I am really only missing the Activity with the name of the group that was created.Screenshot 2021-04-19 151559.jpg

5 REPLIES 5
powercorner
Continued Contributor
Continued Contributor

Hey cstack,

I think there is no ootb connector for your problem. 

But I think you could work around this in scanning your incoming mails by the power automate flow and trigger when a mail from the "Cloud App Security" pops in. Then you can do your filter magic inside the flow and post the infos to teams, or whereevery you need. 
Would this fit your goal?

 

With regards,

Kevin

cstack
Frequent Visitor

@powercorner - I will give this a try and get back to you if I can get it to work.  Many thanks

powercorner
Continued Contributor
Continued Contributor

@cstack you are welcome 🙂 Just continue the post here if it doesnt work

cstack
Frequent Visitor

@powercorner - I am able to connect to the Cloud App notification email from Power Automate without any trouble and know I can use filtering on the body of the email BUT I need to filter on  this line in BOLD the Cloud App notification of the policy match

A new match was detected for your 'New Group Created' policy.
Activity:Create group: group JCCU My Group Name Test

We are a non-profit and cannot afford to get everyone on Premium AAD for group naming conventions but instead have a policy to route group creating activity to a Teams channel for IT staff to review.  We then fix the misnamed groups manually.  I am just trying to automate this a little more by not posting to Teams if the group name meets our rules.  The rules allow for about 10 different beginnings including the one I have in the example above JCCU.  So the above group should get a post to teams that says group name correct ....or something similar and the Alert should be dismissed/closed in Cloud App Security via power automate.  If the group name does not begin with the handful of rules we have I want the post to say PLEASE rename the group to a proper name and close the Alert.  Is it possible to filter on 10 different strings in Power Automate from the email.  The 10 different beginnings like JCCU could also be included in the email address of the person who created the group so I cannot just filter for contains and the 10 allowed beginnings since the group could be wrong but it would see JCCU in the email address of the person creating the group and not flow properly.  These are the allowed group beginnings.  How do I conditional test for Body contains 'Create group: group XX(XX)' where the Xes represent the below list

cstack_0-1619010313628.png

 Not sure this is possible since it is a workaround to paying for Premium AAD.  Any suggestions would be appreciated.

 

Christine Stack

IT Director

Jesuit Conference of Canada and the USA

1016 16th Street NW, suite 400

Washington, D.C. 20036

powercorner
Continued Contributor
Continued Contributor

Hey @cstack ,

 

sorry for my late response, I had to deal with some other problems in the technet and I saw your answer late.

Okay so what I understood is that your flow is now triggered by incoming emails.

 

And now you have the problem with filtering the right information.

 

So the information you are trying to filter is not inside your subject of your mail isnt it?

Cause If the info to filter would be inside the subject you could directly filter it in the trigger of the flow in the "advanced options of the trigger".

powercorner_0-1619351514540.png

But in your case it looks like you need to get the information from the body right?

So technically you could work with the "contains" function and combine it with conditions.

powercorner_1-1619351614860.png

You would need to create a condition inside your flow for every group inside your list.

And if you have a positive condition you could continue with the processing.

I hope I explained myself understandable ^^

 

And sorry for the german/english mix inside the screenshots. I had troubles with my browser language ^^.

 

If you have any more questions, I am here for you 🙂


With regards,

Kevin

Helpful resources

Announcements

Announcing Power Apps Copilot Cookbook Gallery

We are excited to share that the all-new Copilot Cookbook Gallery for Power Apps is now available in the Power Apps Community, full of tips and tricks on how to best use Microsoft Copilot as you develop and create in Power Apps. The new Copilot Cookbook is your go-to resource when you need inspiration--or when you're stuck--and aren't sure how to best partner with Copilot while creating apps.   Whether you're looking for the best prompts or just want to know about responsible AI use, visit Copilot Cookbook for regular updates you can rely on--while also serving up some of your greatest tips and tricks for the Community. Our team will be reviewing posts using the new "Copilot" label to ensure we highlight and amplify the most relevant and recent content, so you're assured of high-quality content every time you visit. If you share a post that gets featured in the curated gallery, you'll get a PM in the Community to let you know!The curated gallery is ready for you to experience now, so visit the new Copilot Cookbook for Power Apps today: Copilot Cookbook - Power Platform Community. We can't wait to see what you "cook" up!    

Tuesday Tips: Getting Started in the Community

TUESDAY TIPS is back!   This weekly series of posts is our way of sharing helpful things we've learned or shared that have helped members of the Community. Whether you're just getting started or you're a seasoned pro, Tuesday Tips will help you know where to go, what to look for, and navigate your way through the ever-growing--and ever-changing--world of the Power Platform Community! The original run of Tuesday Tips was a highlight of last year, and these all-new Tips will hopefully prove to be just as informative as helpful. We will cover some basics about the Community, a few "insider tips" to make your experience even better, and sharing best practices gleaned from our most active community members and Super Users. Make sure to watch the News & Announcements each week for the latest and greatest Tuesday Tips!   THIS WEEK: I'm Brand New! What Do I Do? The number of new community members we have each week is pretty amazing, and we are so glad to welcome all of you to the Community! You may be wondering. "What do I do? Where do I get started? Will anyone be willing to help me? What I have a question? Help!"   Let's start with this: Welcome to the low-code revolution, and more importantly, welcome to the Power Platform Community! This is a great place to start. Whether you're busy with Power Apps, getting familiar with Power Automate, engaging Copilot Studio, or building in Power Pages, there are a few key places you should check out as you begin your journey: FORUMS: The forums are THE place to ask questions, look at questions asked by other Community members—and see answers and solutions from our Super Users and other helpful people in the Community. Power Apps ForumsPower Automate ForumsCopilot Studio ForumsPower Pages Forums   NEWS & ANNOUNCEMENTS: Our News & Announcements section highlights the newest and greatest updates in the Community, news from the product team, and so much more. It’s updated a few times each week and will also help you find ways to connect with what’s going on in the ever-growing world of Power Platform. Power Apps News & AnnouncementsPower Automate News & AnnouncementsCopilot Studio News & AnnouncementsPower Pages News & Announcements   GALLERIES: The Galleries section of the Community features tons of tips and tricks, features and benefits, and more—through videos created by our Super Users, product teams, and other helpful members of the Community. Power Apps GalleriesPower Automate Galleries Copilot Studio GalleriesPower Pages Galleries BLOGS: The community blogs section is full of handy step-by-step tips from members of the Community—and some of them include detailed answers to some of the questions most frequently asked questions, as well as how they solved a problem they faced. Power Apps Community BlogPower Automate Community BlogCopilot Studio Community BlogPower Pages Community Blog POWER UP PROGRAM: If you’d like to really take a huge step forward in your journey, we recommend checking out the Power Up Program, a Microsoft-sponsored initiative that trains new Power Platform users and has been a huge success since it launched a little over a year ago. There’s a waiting list, so definitely apply soon if you’re interested! Find out more here: Microsoft Power Up Program for career switchers.   There's so much more you'll discover in your Power Platform experience, and this Community is here for YOU! We are glad you've discovered us and can't wait to see where you grow! If you're new to the Community and just getting started, make sure to give this post a kudo and introduce yourself so we can welcome you!

Super User of the Month | Drew Poggemann

As part of a new monthly feature in the Community, we are excited to share that Drew Poggemann is our featured Super User for the month of February 2024. If you've been in the Community for a while, we're sure Drew's name is familiar to you, as he is one of our most active contributors--he's been a Super User for five consecutive seasons!   Since authoring his first reply 5 years ago to his 514th solution authored, Drew has helped countless Community members with his insights and expertise. In addition to being a Super User, Drew is also a User Group leader and a Microsoft MVP. His contributions to our Super User sessions and to the new SUIT program are always welcome--as well as his sense of humor and fun-loving way of sharing what he knows with others.   When Drew is not solving problems and authoring solutions, he's busy overseeing the Solution Architecture team at HBS, specializing in application architecture and business solution strategy--something he's been doing for over 30 years. We are grateful for Drew and the amazing way he has used his talent and skills to help so many others in the Community. If you are part of the SUIT program, you got to hear some great tips from Drew at the first SUIT session--and we know he still has much more to share!You can find him in the Community and on LinkedIn. Thank you for all you do, Drew!

Super Users 2024 Season One is Here!

   We are excited to announce the first season of our 2024 Super Users is here! Our kickoff to the new year welcomes many returning Super Users and several new faces, and it's always exciting to see the impact these incredible individuals will have on the Community in 2024! We are so grateful for the daily difference they make in the Community already and know they will keep staying engaged and excited for all that will happen this year.   How to Spot a Super User in the Community:Have you ever written a post or asked for help in the Community and had it answered by a user with the Super User icon next to their name? It means you have found the actual, real-life superheroes of the Power Platform Community! Super Users are our heroes because of the way they consistently make a difference in the Community. Our amazing Super Users help keep the Community a safe place by flagging spam and letting the Community Managers know about issues. They also make the Community a great place to find answers, because they are often the first to offer solutions and get clarity on questions. Finally, Super Users share valuable insights on ways to keep the Community growing, engaging, and looking ahead!We are honored to reveal the new badges for this season of Super Users! Congratulations to all the new and returning Super Users!     To better answer the question "What is a Super User?" please check out this article: Power Apps: What is A Super User? - Power Platform CommunityPower Automate: What is A Super User? - Power Platform Community Copilot Studio: What is A Super User? - Power Platform Community Power Pages: What is A Super User? - Power Platform Community

Microsoft Power Platform | 2024 Release Wave 1 Plan

Check out the latest Microsoft Power Platform release plans for 2024!   We have a whole host of exciting new features to help you be more productive, enhance delegation, run automated testing, build responsive pages, and so much more.    Click the links below to see not only our forthcoming releases, but to also try out some of the new features that have recently been released to market across:     Power Apps  Power Automate  Copilot Studio   We can’t wait to share with you all the upcoming releases that will help take your Power Platform experience to the next level!    Check out the entire Release Wave: Power Platform Complete Release Planner 

It's Time to S.U.I.T. Up! Season One Begins This Week

        After its initial announcement met with such resounding success at the Microsoft Power Platform Conference last fall, the Super User In Training Program's first season is about to kick off! We are so excited to welcome hundreds of potential new Super Users who have signed up for our inaugural program.Not sure what a Super User is yet? Keep reading:Have you ever been exploring the community and come across a user with this unique icon next to their name? It means you have found the actual, real-life superheroes of the Power Platform Community! Super Users are our heroes because of the way they are consistently helpful with everything from solutions to flagging spam, offering insight on the community, and so much more!If you've ever wondered exactly what a Super User does and how they earn that special badge, please check out this article: Power Apps: What is A Super User? - Power Platform CommunityPower Virtual Agents: What is A Super User? - Power Platform Community Power Automate: What is A Super User? - Power Platform CommunityPower Pages: What is A Super User? - Power Platform CommunityIf you missed this season of S.U.I.T., don't worry! We have a whole new season coming soon, so watch our News & Announcements for updates on when you can sign up and get your Super User SUIT on!

Users online (3,345)