Overview

This node performs operations related to the EndpointMEM resource, specifically the AddDefenderDeployment operation. It allows users to add a Defender deployment configuration to a tenant by sending a POST request to the /api/AddDefenderDeployment endpoint. This is useful for managing Microsoft Defender settings across multiple tenants in an automated workflow, such as configuring ASR, Compliance, EDR, Exclusion policies, and other Defender-related settings.

Use Case Examples

1. Automate the deployment of Microsoft Defender configurations to multiple tenants by specifying ASR, Compliance, and EDR settings.
2. Update Defender deployment policies with custom exclusions and assignment targets across selected tenants.

Properties

Output

JSON

• json - Response data from the AddDefenderDeployment API call, including deployment details and status.

Dependencies

• An API key credential for authenticating requests to the CIPP API

Troubleshooting

• Ensure the API key credential is correctly configured and has the necessary permissions to perform Defender deployment operations.
• Verify that the tenant filter and selected tenants are correctly specified to avoid deployment errors.
• Check the JSON format of complex fields like ASR, Compliance, EDR, Exclusion, and Policy to ensure they are valid and conform to API expectations.
• If the node returns errors, enable the debug option to inspect the actual request URL, headers, query parameters, and body for troubleshooting.