| title | unifiedRoleManagementAlertIncident: remediate |
|---|---|
| description | Remediate or mitigate an incident of an alert. |
| author | rkarim-ms |
| ms.localizationpriority | medium |
| ms.subservice | entra-id-governance |
| doc_type | apiPageType |
| ms.date | 04/05/2024 |
Namespace: microsoft.graph
[!INCLUDE beta-disclaimer]
Remediate or mitigate an incident of an alert. Run this action to fix an incident for a remediable alert, automatically applying the recommended mitigationSteps.
The alert incident can be one of the following types that are derived from the unifiedRoleManagementAlertIncident object:
- invalidLicenseAlertIncident
- noMfaOnRoleActivationAlertIncident
- redundantAssignmentAlertIncident
- rolesAssignedOutsidePrivilegedIdentityManagementAlertConfiguration
- sequentialActivationRenewalsAlertIncident
- staleSignInAlertIncident
- tooManyGlobalAdminsAssignedToTenantAlertIncident
[!INCLUDE national-cloud-support]
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types. To learn more about these permissions, see the permissions reference.
[!INCLUDE permissions-table]
[!INCLUDE rbac-pim-alerts-apis-write]
POST /identityGovernance/roleManagementAlerts/alerts/{unifiedRoleManagementAlertId}/alertIncidents/{unifiedRoleManagementAlertIncidentId}/remediate| Name | Description |
|---|---|
| Authorization | Bearer {token}. Required. Learn more about authentication and authorization. |
Don't supply a request body for this method.
If successful, this action returns a 200 OK response code. Calling this API for an incident that has an alert definition with isRemediatable set to false returns in a 400 Bad Request error response.
The following example shows a request.
POST https://graph.microsoft.com/beta/beta/identityGovernance/roleManagementAlerts/alerts/DirectoryRole_67b47f38-0f0b-4e62-a3be-859140c2061f_TooManyGlobalAdminsAssignedToTenantAlert/incident/0645231d-16ba-4ebf-851a-0875df4052bd/remediateThe following example shows the response.
HTTP/1.1 200 OK