CIPP icon

CIPP

CIPP-API is an Azure Function App providing the logic layer for the CIPP platform. This spec is auto-generated via static analysis of both the API (PowerShell) and frontend (React/Next.js) repositories. Last generated: 2026-03-02.

Actions75

Security → ExecSetSecurityAlert

AI-generated

Overview

This node interacts with the CIPP API to manage security alerts within a specified tenant environment. Specifically, the 'ExecSetSecurityAlert' operation allows users to update or set security alert details such as GUID, Provider, Status, and Vendor for a targeted tenant domain or across all tenants in a multi-tenant setup. This is useful for automating security alert management, integrating security workflows, and maintaining up-to-date alert statuses in security monitoring systems.

Use Case Examples

  1. Updating the status of a security alert for a specific tenant by providing the alert's GUID and new status.
  2. Setting a security alert's provider and vendor information for all tenants in a multi-tenant environment.

Properties

Name Meaning
Tenant Filter Target tenant domain or 'AllTenants' for multi-tenant operations. Used to specify which tenant the security alert update applies to.
Additional Fields Optional fields to specify details of the security alert such as GUID, Provider, Status, and Vendor.

Output

JSON

  • json - The response from the CIPP API after setting the security alert, including any debug information if enabled.

Dependencies

  • CIPP API with appropriate credentials for authentication

Troubleshooting

  • Ensure the 'Tenant Filter' is correctly specified and matches the target tenant domain or use 'AllTenants' for multi-tenant operations.
  • Verify that the GUID and other additional fields are correctly provided and valid according to the CIPP API requirements.
  • Check API credentials and permissions to ensure the node can successfully authenticate and perform the operation.
  • Enable debug mode to get detailed request and response information for troubleshooting API call issues.

Discussion