Reference
General automation actions
Actions that are not tied to a specific service, such as notifications, approvals and scheduling.
| Action | Description | Category |
|---|---|---|
| Block a Shadow AI agent on managed devices | Creates a Microsoft Intune device configuration policy that blocks the agent's executable from running on managed Windows devices, mirroring the Microsoft 365 admin center 'block' action. | Change property |
| Delay | Adds a delay to the automation to execute the following actions after the delay period has passed. | Schedule |
| Delete an Agent Blueprint | Deletes a Microsoft Entra agent identity blueprint via DELETE /applications/{id} (see https://learn.microsoft.com/en-us/graph/api/agentidentityblueprint-delete). Disable the blueprint principal first if there is any chance the blueprint is still in active use - deleting it cascades to its child agent identities. | Delete Content |
| Delete an Agent Identity | Deletes a Microsoft Entra agent identity. See https://learn.microsoft.com/en-us/graph/api/agentidentity-delete - removes the identity entirely; consider Disable first if there is any chance the agent is still needed. | Delete Content |
| Disable an Agent Blueprint Principal (kill switch) | Sets accountEnabled = false on the agent identity blueprint principal via PATCH /servicePrincipals/{id}. This is the tenant-side kill switch - it disables token issuance for every agent identity created from this blueprint. | Change property |
| Disable an Agent Identity | Disables a Microsoft Entra agent identity (sets accountEnabled = false on the underlying servicePrincipal) so it can no longer authenticate. | Change property |
| Mark a Shadow AI agent as approved | Marks a shadow AI agent as sanctioned by IT. Approved agents are excluded from the Shadow AI policies. | Change property |
| Message | Notification | |
| Provision Group | Create a Microsoft Group based on a template. | Provisioning |
| Rename an Agent Blueprint | Updates the displayName of a Microsoft Entra agent identity blueprint via PATCH /applications/{id}. | Change property |
| Rename an Agent Identity | Updates the displayName of a Microsoft Entra agent identity via PATCH /servicePrincipals/{id}. | Change property |
| Send HTTP request | Configure an HTTP request to an endpoint url and pass headers, query parameters and a payload as body to it. | Invoke request |
| Send email | Send an email to one or multiple email addresses | Notification |
| Trigger Azure Function | Trigger an external Azure function, that then can retrieve data from Rencore Governance via the API. | Invoke request |
| Trigger Webhook | Trigger and external webhook, that can then retrieve data from Rencore Governance via the API. | Invoke request |