Actions75
- EndpointAutopilot Actions
- TenantAdministrationAlerts Actions
- EndpointMEM Actions
- TenantGDAP Actions
- TenantAdministrationApplicationApproval Actions
- TenantAdministration Actions
- CIPPSetup Actions
- Security Actions
- IdentityAdministrationDevices Actions
- CIPPExtensions Actions
- EmailExchangeTools Actions
Security → ExecSetMdoAlert
AI-generatedOverview
This node interacts with the CIPP API to manage Microsoft Defender for Office (MDO) alerts within a specified tenant environment. It allows users to set or update MDO alerts by sending relevant alert details such as Assigned, Classification, Determination, GUID, and Status to the API. This is useful for security teams or administrators who want to automate the management and updating of security alerts in their tenant.
Use Case Examples
- Automatically update the status and classification of MDO alerts for a tenant.
- Assign alerts to specific users or teams based on alert GUIDs.
- Integrate with security workflows to handle MDO alerts programmatically.
Properties
| Name | Meaning |
|---|---|
| Tenant Filter | Target tenant domain or 'AllTenants' for multi-tenant operations. |
| Additional Fields | Optional fields to specify alert details such as Assigned, Classification, Determination, GUID, and Status. |
Output
JSON
json- Response from the API call, typically the updated alert information or operation result.
Dependencies
- An API key credential for authenticating with the CIPP API
Troubleshooting
- Ensure the tenant filter is correctly specified and the tenant exists.
- Verify that the API key credential is valid and has the necessary permissions.
- Check that all required fields for the alert are provided and correctly formatted.
- If the API request fails, enable debug mode to inspect the request and response details for troubleshooting.