DevOps & Observability
DevOps, AppDev, and tool-chains, oh my!

Add a User to an AD group using Phantom

splunk_user4
Explorer

Would it be easier to use a custom phantom playbook to Add a user to a specific AD group from an event trigger, instead of creating a custom App in splunk using the App builder?  

 

Thanks,

 

0 Karma
1 Solution

HoardingIO
Splunk Employee
Splunk Employee

Thank you for the question. I suggest you post in the Phantom threads here: https://community.splunk.com/t5/Splunk-Phantom/bd-p/security-phantom for a quicker response. This section is focused on the DevOps/Observability Suite.

View solution in original post

HoardingIO
Splunk Employee
Splunk Employee

Thank you for the question. I suggest you post in the Phantom threads here: https://community.splunk.com/t5/Splunk-Phantom/bd-p/security-phantom for a quicker response. This section is focused on the DevOps/Observability Suite.

Get Updates on the Splunk Community!

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...