Additional Permissions for Launching Playbooks
Question
Additional permissions are required to launch a playbook from automation rules.
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B.Correct Answer: A.
![Actions ©
[Run paybook Vv] a
l v]
© Acire Sentinel requires explicit permissions to run playbooks, If a playbook appears
‘unavailable, it means Azure Sentinel does not have these permissions.
Manage playbook permissions](https://eaeastus2.blob.core.windows.net/optimizedimages/static/images/Microsoft-Security-Operations-Analyst-(SC-200)/answer/imgsss12.png)
Reference:
The statement "Additional permissions are required to launch a playbook from automation rules" is true.
In Azure Sentinel, automation rules can be used to automate various tasks, such as performing investigations, generating incidents, or executing playbooks. Playbooks are used to automate and orchestrate actions across multiple systems or services.
When an automation rule is triggered, it can launch a playbook to perform a series of actions. However, launching a playbook requires additional permissions beyond the permissions required for running an automation rule.
In order to launch a playbook from an automation rule, the user or service principal associated with the automation rule must have the "Run as account" role assigned to it. This role provides the necessary permissions to launch the playbook and perform the actions specified in it.
Therefore, the statement "Additional permissions are required to launch a playbook from automation rules" is true.