Integrate Prisma Cloud with Microsoft Teams

Learn how to integrate Prisma Cloud with Microsoft Teams.
Microsoft Teams is a cloud-based team collaboration software that is part of the Office 365 suite of applications and is used for workplace chat, video meetings, file storage, and application integration.
Prisma Cloud integrates with Microsoft Teams and monitors your assets and sends alerts on resource misconfigurations, compliance violations, network security risks, and anomalous user activities either as they happen or as consolidated summary card, depending on how you configure alert notifications. Each alert message is a webhook notification that includes details such as the cloud type, policy name, and the resource that triggered the alert and the message card indicates the severity with a red (high), yellow (medium) or gray (low) line for easy scanning.
  1. Set up Microsoft Teams to view alert notifications from Prisma Cloud.
    You must create an incoming webhook connector on a new channel or an already existing channel on Microsoft Teams to enable the integration with Prisma Cloud. This webhook channel helps in the consolidation of alert notifications from Prisma Cloud into Microsoft Teams so that your operations team can review and take action on the alerts. To enable this integration, you must have administrative privileges or must contact your Microsoft 365 admin who manages Team settings for your organization.
    1. In Microsoft Teams, choose
      More options (...)
      next to the channel name and then choose
      Connectors
      .
    2. Scroll to
      Incoming Webhook
      , select
      Add
      and
      Install
      .
    3. Enter a name for the webhook, and
      Create
      .
    4. Copy the webhook URL to the clipboard and save it, before you click
      Done
      .
  2. Set up Microsoft Teams on Prisma Cloud.
    1. Log in to Prisma Cloud.
    2. Select
      Settings
      Integrations
      .
    3. Select 
      +Add New
      to create a new integration.
    4. Set
      Microsoft Teams
       as the
      Integration Type
    5. Enter a name for the integration and optionally a description.
    6. Paste the
      Webhook URL
      that you copied earlier.
    7. Click
      Test
      and then
      Save
      .
      integration-ms-teams.png
      On successful integration in the Microsoft teams conversation you receive a test message card with a green line.
      integration-ms-teams-message.png
  3. Create an Alert Rule or modify an existing rule to receive alerts in Microsoft Teams. See Send Prisma Cloud Alert Notifications to Third-Party Tools.
    The message card includes information on the policy rules and the resource names that have violated the policy, and it includes a direct link with the relevant filters to access Prisma Cloud and view the alert or scheduled notification summary directly in the app.

Related Documentation