Skip to content

Commit 61bea7b

Browse files
committed
ofer's comment
1 parent 91b1a00 commit 61bea7b

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

articles/sentinel/sap/sap-solution-log-reference.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -296,7 +296,9 @@ The **SAPAuditLogConfigRecommend** is a helper function designed to offer recomm
296296

297297
### SAPUsersGetVIP
298298

299-
The [Microsoft Sentinel solution for SAP® applications](solution-overview.md) uses a concept of central user tagging and explicit exclusions, designed to help you lower false positives with minimal effort. Use the *SAPUsersGetVIP* function as follows:
299+
The [Microsoft Sentinel solution for SAP® applications](solution-overview.md) uses a concept of central user tagging and explicit exclusions, designed to help you lower false positives with minimal effort. Use the *SAPUsersGetVIP* function to exclude users from triggering alerts by specifying SAP user roles, SAP user functions, or tags that represent those users.
300+
301+
Tags specified as input for the *SAPUsersGetVIP* function exclude all users with a tag listed in the *SAP_User_Config* watchlist. The same functionality is extended to work with wildcards, allowing you to assign a single tag to a group of users with the same naming syntax.
300302

301303
1. Tag users in the *SAP_User_Config* watchlist as follows:
302304

0 commit comments

Comments
 (0)