Integrate Prisma Cloud with Microsoft Teams

Learn how to integrate Prisma™ Cloud with Microsoft Teams.
Microsoft Teams is a cloud-based team collaboration software that is part of the Office 365 suite of applications and is used for workplace chat, video meetings, file storage, and application integration.
Prisma™ Cloud integrates with Microsoft Teams and monitors your assets and sends alerts on resource misconfigurations, compliance violations, network security risks, and anomalous user activities either as they happen or as a consolidated summary card—determined by how you configure alert notifications. Each alert message is a webhook notification that includes details such as the cloud type, policy name, and the resource that triggered the alert and the message card indicates the severity with a red (high), yellow (medium) or gray (low) line to help you quickly assess alert severity. .
  1. Set up Microsoft Teams to view alert notifications from Prisma Cloud.
    You must create an incoming webhook connector on a new channel or on a pre-existing channel on Microsoft Teams to enable the integration with Prisma Cloud. This webhook channel helps consolidate alert notifications from Prisma Cloud in Microsoft Teams so that your operations team can review and take action on the alerts. To enable this integration, you must have administrative privileges or contact the Microsoft 365 administrator who manages Team settings for your organization.
    1. In Microsoft Teams, click
      More options (…​)
      next to the channel name and select
      Connectors
      .
    2. Scroll to
      Incoming Webhook
      ,
      Add
      a webhook, and
      Install
      it.
    3. Enter a name for the webhook and
      Create
      it.
    4. Copy the webhook URL to the clipboard and save it before you click
      Done
      .
  2. Set up Microsoft Teams on Prisma Cloud.
    1. Log in to Prisma Cloud to enable the integration.
    2. Select
      Settings
      Integrations
      .
    3. Set the
      Add Integration
      to
      Microsoft Teams
      .
    4. Enter an
      Integration Name
      and a
      Description
      .
    5. Enter the
      Webhook URL
      that you previously copied from Microsoft Teams
    6. Click
      Next
      and then
      Test
      .
      On successful integration in the Microsoft Teams conversation, you will receive a test message card with a green line.
  3. Create an Alert Rule for Run-Time Checks or modify an existing rule to receive alerts in Microsoft Teams. (See Send Prisma Cloud Alert Notifications to Third-Party Tools.)
    The message card includes information on the policy rules and the resource names that have violated the policy and it includes a direct link with the relevant filters to access Prisma Cloud and view the alert or scheduled notification summary directly in the app.

Recommended For You