Logic Apps playbook
A Logic Apps playbook is a Sentinel playbook built as an Azure Logic Apps workflow. It runs from an automation rule or by hand and uses connectors to reach tools. Logic Apps billing is separate from Sentinel billing, so a busy playbook adds a second meter.
What Logic Apps playbook means
Authors need the right roles. Running a playbook from a rule needs a named role on the playbook's resource group.
Only incident-trigger playbooks run from incident-trigger rules, and only alert-trigger playbooks from alert-trigger rules.
Logic Apps playbook in Microsoft Sentinel's own words
Running a Sentinel playbook from an automation rule needs the Microsoft Sentinel Automation Contributor role on the playbook's resource group, and Logic Apps charges apply on top of Sentinel charges. Microsoft Sentinel documentation, read 2026-11-03