<style>p { margin: 0; }span.fr-emoticon.fr-emoticon-img { background-repeat: no-repeat !important; font-size: inherit; height: 1em; width: 1em; min-height: 20px; min-width: 20px; display: inline-block; margin: -0.1em 0.1em 0.1em; line-height: 1; vertical-align: middle; } span.fr-emoticon { font-weight: normal; font-family: "Apple Color Emoji", "Segoe UI Emoji", "NotoColorEmoji", "Segoe UI Symbol", "Android Emoji", "EmojiSymbols"; display: inline; line-height: 0; } blockquote { border-left: solid 2px #5e35b1; color: #5e35b1; margin-left:0; padding-left:5px;}blockquote blockquote{ border-color: #00bcd4; color: #00bcd4;}blockquote blockquote blockquote{ border-color: #43a047; color: #43a047;} table.grid{ border-collapse: collapse;} table.grid td, table.grid th { border: 1px solid #ddd;} .fr-fic.fr-dib{ display: block; margin: 5px auto;}.fr-fic.fr-dib.fr-fir{ text-align: right; margin: 5px 0 5px auto;}.fr-fic.fr-dib.fr-fil{ text-align: left; margin: 5px auto 5px 0;}.fr-fic.fr-dii{ float: none; margin: 5px auto;}.fr-fic.fr-dii.fr-fil{ float: left; margin: 5px auto;}.fr-fic.fr-dii.fr-fir{ float: right; margin: 5px auto;}</style><p>Added a new action system use called 'Azure Action', allowing for the ability to create Users in Azure and assign them to groups via system actions.</p>
<style>p { margin: 0; }span.fr-emoticon.fr-emoticon-img { background-repeat: no-repeat !important; font-size: inherit; height: 1em; width: 1em; min-height: 20px; min-width: 20px; display: inline-block; margin: -0.1em 0.1em 0.1em; line-height: 1; vertical-align: middle; } span.fr-emoticon { font-weight: normal; font-family: "Apple Color Emoji", "Segoe UI Emoji", "NotoColorEmoji", "Segoe UI Symbol", "Android Emoji", "EmojiSymbols"; display: inline; line-height: 0; } blockquote { border-left: solid 2px #5e35b1; color: #5e35b1; margin-left:0; padding-left:5px;}blockquote blockquote{ border-color: #00bcd4; color: #00bcd4;}blockquote blockquote blockquote{ border-color: #43a047; color: #43a047;} table.grid{ border-collapse: collapse;} table.grid td, table.grid th { border: 1px solid #ddd;} .fr-fic.fr-dib{ display: block; margin: 5px auto;}.fr-fic.fr-dib.fr-fir{ text-align: right; margin: 5px 0 5px auto;}.fr-fic.fr-dib.fr-fil{ text-align: left; margin: 5px auto 5px 0;}.fr-fic.fr-dii{ float: none; margin: 5px auto;}.fr-fic.fr-dii.fr-fil{ float: left; margin: 5px auto;}.fr-fic.fr-dii.fr-fir{ float: right; margin: 5px auto;}</style><p><strong>In this guide we will cover:</strong></p><p><strong>- How to Utilise Azure Actions in Halo</strong></p><p><br></p><p>Azure Actions allow you to create users in an Azure tenant and assign a user to an Azure group from Halo. </p><p><em><strong><br></strong></em></p><p><em><strong>Pre-requisites:</strong></em></p><ul><li style="font-weight: bold; font-style: italic;"><em><strong>You have successfully configured the <a href="https://www.usehalo.com/guides/1106" target="_blank" rel="noopener noreferrer" style="font-weight: bold; font-style: italic;">Entra ID integration</a></strong></em></li><li style="font-weight: bold; font-style: italic;"><em><strong>You have successfully configured the </strong></em><a href="https://www.usehalo.com/guides/1189" target="_blank" rel="noopener noreferrer" style="font-weight: bold; font-style: italic;"><strong><em>Microsoft CSP integration </em></strong></a></li></ul><p><br></p><p>Ensure you have used the Entra ID or CSP integration to connect the Entra tenant that you would like to carry out the actions in. </p><p><br></p><p><strong><span style="font-size: 14pt;">How to Utilise Azure Actions in Halo<br></span></strong></p><p>An action with the system use 'Azure Action' is available. </p><p><br></p><p><img data-fr-image-pasted="true" src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjZkMTk2YjVkLTEyNzMtNGVhZS05N2ZlLTFlNTI1NzQ5YTg3ZSJ9.vHGP0nfN9FxZanCvMSSUascJrZ0VNF2EpwrNl124d7I" class="fr-fic fr-fil fr-dib" width="488" height="148"></p><p><strong><span style="font-size: 10pt;">Fig 1. Action with system use to complete an Azure Action</span></strong></p><p><br></p><p id="isPasted">When this option is selected, a new "Azure Action" tab will show on the action configuration. Here you can select which Azure action you would like to perform, and which Azure connection you would like to use for the action. Connections setup in the Azure Active Directory Integration and also the Microsoft CSP Integration (HaloPSA) will show here. Ensure you choose the connection that authenticates access to the tenant you would like the action to be carried out in. </p><p><br></p><p>If the connection you have chosen does not yet contain the necessary permissions to complete your selected Azure action, the required permissions will be listed on the action configuration page and the rest of the configuration will not be available. You must first add these permissions to your application in Azure and re-authorize the connection before the rest of the configuration options are made available. Different permissions are required depending on which Azure action you are completing, be sure to check the action configuration for the exact permissions your connection needs to have. </p><p><br></p><p><strong><em>Note: Permissions will show dynamically on the page based on the Azure connection you have selected.</em></strong></p><p><br></p><p><img data-fr-image-pasted="true" src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImE3MmIzNGE1LTdhMWUtNDVlOC1iYzE4LWZmZDVhYzAyOTg0YyJ9.EcNbbxqRIKadUpdAX_3juWa5Z8QGIeQ-UpxRa74lZlg" class="fr-fic fr-fil fr-dib" width="982" style="width: 982px; height: 417.094px;" height="417.094"></p><p><strong><span style="font-size: 10pt;">Fig 2. Permissions required for Action to Assign User to Group</span></strong></p><p><br></p><p><strong><span style="font-size: 10pt;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6Ijk0YjRmY2M4LTIwMDgtNDgwNi05Zjk2LWEzOTk3MTQ4OGFkZCJ9.nun99NuwY_JxYLyL4j9rXxFXpxdFQ9DS8pEOsaasM9Y" class="fr-fic fr-dii"></span></strong></p><p><strong><span style="font-size: 10pt;">Fig 3. Permissions required to Create User</span></strong></p><p><br></p><p><br></p><p>Once your connection has the required permissions, you can configure input and output mappings. Input mappings allow you to map Halo Ticket/Action fields to Azure fields for the corresponding action:</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjMxODdjNzVhLTFhZmItNGI4NS04ZTZkLTk5Njg3YmEzMmUxNCJ9.Lkyrl8mUxi2Dp_NIemC8L140cY2-PBVx0OmkdtTZThc" class="fr-fic fr-fil fr-dib" width="982" style="width: 984px; height: 330.733px;" height="331"></p><p><strong><span style="font-size: 10pt;">Fig 4. Field Mappings</span></strong></p><p><br></p><p><span id="isPasted" style="color: rgb(0, 0, 0); font-family: sans-serif; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; display: inline !important; float: none;">The Azure Action will be performed against the first Azure tenant which has been mapped to the Ticket's assigned Client. If you have multiple Azure tenants mapped to one Client, you can override which tenant the Action is performed against by creating an input mapping for the Azure Tenant field</span></p><p><br></p><p>Output mappings are only available when using the Create User Azure action, which allow you to map the ID of the created user to a ticket custom field. </p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6Ijc1MzFiNTBlLTBlNDctNGY3NC04ODhiLTNhNWFhM2I4OTIwYyJ9.FeGwuwxw07OhqhoWYxzxkHv_XAFvoJ29NOyam-Zh2pE" class="fr-fic fr-fil fr-dib" width="1053" style="width: 1055px; height: 411.599px;" height="412"></p><p><strong><span style="font-size: 10pt;">Fig 5. Output Mappings</span></strong></p><p><br></p><p>By creating an output mapping for the id field, you can then use this in subsequent Azure actions. For example, an automation workflow can be created that first creates the Azure user, and then assigns them to a group.</p><p><br></p><p><img data-fr-image-pasted="true" src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6Ijc4OGY3MGU2LTVlZTUtNDExZi1hNDk5LWM1N2I5Y2ZlMTBhNiJ9.Y8SaNhzV9IEZZJUR-dKZ33Qfy89_I_wP5SQPtGpsmhg" class="fr-fic fr-fil fr-dib" width="805" height="130"></p><p><strong><span style="font-size: 10pt;">Fig 6. Automation Workflow to create a user then assign them to a group</span></strong></p><p><br></p><p>For use of more Azure actions make use of <a href="https://www.usehalo.com/guides/1630" target="_blank" rel="noopener noreferrer">custom integration runbooks.</a></p>
