Logic app to send email to user (actor) automatically when there is some incident with email address or upn

Question

Hi

Is there any way to get user involved in Microsoft alert (mostly for high and medium severity) in logic apps and then send email alert to them automatically. In To section as per below image, it should get UPN or email address of user

Answer 1

Hello @sachin raj,

Please follow below instructions to configure the logic app.

1.Create logic app with when HTTP request receive connector.

1. Go alerts action group>> Actions >> select logic app >> Save

1. Now trigger the logic app from alert to generate payload. (wait for alert). after alert generated please check the logic app run history.

1. click on the run and copy http connector raw out put.( there you can see alert data)

1. Go to logic app designer >> click on Http connector>> Click on use sample payload to generate schema>> Now paste the http raw out put.>> done.

1. Please add send email connector in logic app and configure the dynamic values from http connector as you required in send an email like to address and subject, body.

If this answer was helpful, please click "Accept the answer" and mark Yes, as this can help other community members.

If you have any other questions or are still experiencing issues, feel free to ask in the "comments" section, and I'd be happy to help.

Answer 2

Yes! You can fetch user emails/UPNs in Logic Apps for alerts using:

1. Microsoft Graph API – Call https://graph.microsoft.com/v1.0/users/{userId} to retrieve the user’s email from the alert payload.
2. Alert Entities – If using Sentinel/Defender, check the alert’s "Entities" section for user details.
3. Action Groups – Configure dynamic email recipients in Azure Monitor.

For high/medium alerts, add a severity filter in your Logic App. Which alert service are you using? This helps tailor the solution."