Incidents - Create Team

Service:

Sentinel

API Version:

2024-01-01-preview

Creates a Microsoft team to investigate the incident by sharing information and insights between participants.

POST https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/createTeam?api-version=2024-01-01-preview

URI Parameters

Name	In	Required	Type	Description
incidentId	path	True	string	Incident ID
resourceGroupName	path	True	string	The name of the resource group. The name is case insensitive.
subscriptionId	path	True	string	The ID of the target subscription.
workspaceName	path	True	string	The name of the workspace. Regex pattern: ^[A-Za-z0-9][A-Za-z0-9-]+[A-Za-z0-9]$
api-version	query	True	string	The API version to use for this operation.

Responses

Name	Type	Description
200 OK	TeamInformation	OK
Other Status Codes	CloudError	Error response describing why the operation failed.

Security

azure_auth

Azure Active Directory OAuth2 Flow

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name	Description
user_impersonation	impersonate your user account

Examples

Incidents_CreateTeam

Sample Request

HTTP

POST https://management.azure.com/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/incidents/69a30280-6a4c-4aa7-9af0-5d63f335d600/createTeam?api-version=2024-01-01-preview

{
  "teamName": "Team name",
  "teamDescription": "Team description",
  "groupIds": null,
  "memberIds": null
}

Sample Response

Status code:

200

{
  "teamId": "99978838-9bda-4ad4-8f93-4cf7ebc50ca5",
  "primaryChannelUrl": "https://teams.microsoft.com/l/team/19:80bf3b25485b4067b7d2dc4eec9e1578%40thread.tacv2/conversations?groupId=99978838-9bda-4ad4-8f93-4cf7ebc50ca5&tenantId=5b5a146c-eba8-46af-96f8-e31b50d15a3f",
  "teamCreationTimeUtc": "2021-03-15T17:08:21.995Z",
  "name": "Team name",
  "description": "Team description"
}

Definitions

Name	Description
CloudError	Error response structure.
CloudErrorBody	Error details.
TeamInformation	Describes team information

CloudError

Error response structure.

Name	Type	Description
error	CloudErrorBody	Error data

CloudErrorBody

Error details.

Name	Type	Description
code	string	An identifier for the error. Codes are invariant and are intended to be consumed programmatically.
message	string	A message describing the error, intended to be suitable for display in a user interface.

TeamInformation

Describes team information

Name	Type	Description
description	string	The description of the team
name	string	The name of the team
primaryChannelUrl	string	The primary channel URL of the team
teamCreationTimeUtc	string	The time the team was created
teamId	string	Team ID