Sensitive Group Audit

3 Nodes Trigger: Unbekannt

Workflow Diagramm

Auto-generiert

graph LR
    N0["🔧 Poll Group Changes"]
    N1["🔧 Filter Sensitive"]
    N2["🔧 Alert Security"]
    N0 --> N1
    N1 --> N2

    classDef trigger fill:#f59e0b,stroke:#b45309,color:#000
    classDef action fill:#292524,stroke:#44403c,color:#e7e5e4
    classDef logic fill:#1e1b4b,stroke:#4338ca,color:#c7d2fe
    class N0 action
    class N1 action
    class N2 action

Nodes im Workflow

Poll Group Changes

Http Request

Filter Sensitive

Function

Alert Security

Microsoft Teams

Workflow Beschreibung

n8n Workflow

Importiere diesen JSON-Code direkt in deine n8n Instanz.

**Name im Flow**: 28_Sensitive_Group_Audit

{
    "name": "28_Sensitive_Group_Audit",
    "nodes": [
        {
            "parameters": {
                "pollInterval": "10m",
                "authentication": "predefinedCredentialType",
                "nodeCredentialType": "microsoftGraphOAuth2Api",
                "url": "https://graph.microsoft.com/v1.0/auditLogs/directoryAudits?$filter=activityDisplayName eq 'Add member to group'",
                "options": {}
            },
            "name": "Poll Group Changes",
            "type": "n8n-nodes-base.httpRequest",
            "typeVersion": 3,
            "position": [
                250,
                300
            ],
            "credentials": {
                "microsoftGraphOAuth2Api": {
                    "id": "YOUR_CREDENTIAL_ID",
                    "name": "Microsoft Graph Account"
                }
            }
        },
        {
            "parameters": {
                "functionCode": "const sensitiveGroups = ['HR Confidential', 'Executive Team'];nreturn items.filter(i => {n  const target = i.json.targetResources.find(r => r.type === 'Group');n  return target && sensitiveGroups.includes(target.displayName);n});"
            },
            "name": "Filter Sensitive",
            "type": "n8n-nodes-base.function",
            "typeVersion": 1,
            "position": [
                450,
                300
            ]
        },
        {
            "parameters": {
                "resource": "chat",
                "message": "=⚠️ **Sensitive Group Access**nUser added to group {{ $json.targetResources[0].displayName }}."
            },
            "name": "Alert Security",
            "type": "n8n-nodes-base.microsoftTeams",
            "typeVersion": 1,
            "position": [
                650,
                300
            ]
        }
    ],
    "connections": {
        "Poll Group Changes": {
            "main": [
                [
                    {
                        "node": "Filter Sensitive",
                        "type": "main",
                        "index": 0
                    }
                ]
            ]
        },
        "Filter Sensitive": {
            "main": [
                [
                    {
                        "node": "Alert Security",
                        "type": "main",
                        "index": 0
                    }
                ]
            ]
        }
    }
}

So importierst du diesen Workflow

Klappe den JSON Code oben auf und klicke Kopieren.
Öffne dein n8n Dashboard.
Drücke Strg+V direkt im Editor.

Dateiname 28_Sensitive_Group_Audit.json

Auf GitHub ansehen