Can I set an owner on a recommendation in defender for cloud without using governance rules?

Stephanie Schraufstetter 0 Reputation points
2024-06-27T12:23:35.4433333+00:00

We already used governance rules to set owner on severity "high" recommendations in defender for cloud. Now we need to set owners more specific, depending on resource tags.

For example we have a recommendation "Windows servers should be configured to use secure communication protocol" with ten unhealthy servers. The servers are in two different subscriptions and will get an owner depending on the email tag in the subscription via governance rule. But now we have the problem that two servers are managed from another person, we can see this because of a special tag on the servers. How can I set another owner automatically depending on the tag on a resource? Can anybody help me?
I can build a logic app or function but I don't know how to access this "owner" parameter. Thanks for any tipp!

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
{count} votes