---
title: Azure – You can now get notification when your Secure Score downgrade - cubesys
description: After releasing a Power BI dashboard to follow up on the evolution of your Azure Secure Score (see https://t.co/U1I15FSuBP), you can now get an email notification if your Secure Score is reducing.The playbook is available for deployment in the Azure Security Center Github repository here https://github.com/Azure/Azure-Security-Center/tree/master/Secure%20Score/Secure%20Score%20Reduction%20AlertsConnect to the above URL…
---

[Latest News & Blogs - cubesys ](https://www.cubesys.com.au/blog)

# [Azure – You can now get notification when your Secure Score downgrade - cubesys](https://www.cubesys.com.au/blog/azure-you-can-now-get-notification-when-your-secure-score-downgrade)

 Written by [cubesys](https://www.cubesys.com.au/blog/author/cubesys) | Aug 20, 2020 2:00:00 PM

After releasing a Power BI dashboard to follow up on the evolution of your Azure Secure Score (see [https://t.co/U1I15FSuBP](https://t.co/U1I15FSuBP)), you can now get an email notification if your Secure Score is reducing.

The playbook is available for deployment in the Azure Security Center Github repository here [https://github.com/Azure/Azure-Security-Center/tree/master/Secure%20Score/Secure%20Score%20Reduction%20Alerts](https://github.com/Azure/Azure-Security-Center/tree/master/Secure%20Score/Secure%20Score%20Reduction%20Alerts)

Connect to the above URL and use the **Deploy to Azure** button

<https://www.cubesys.com.au/hubfs/Imported_Blog_Media/image_thumb-281.png>

Then you may be asked to authenticate against your Azure tenant.

Once authenticated, fill up the deployment details as below:

- Select the subscription where the playbook will be deployed
- As well as the resource group
- The region will be set automatically based on the above selection
- Provide the Log Analytics name, resource group and subscription ID
- Update (if needed) the frequency of reviewing the Secure Score and the percentage threshold reduction (meaning if the Secure Score reduces by x%)
- The notification email

<https://www.cubesys.com.au/hubfs/Imported_Blog_Media/image_thumb1-235.png>

Now you can complete the deployment

<https://www.cubesys.com.au/hubfs/Imported_Blog_Media/image_thumb3-144.png>  <https://www.cubesys.com.au/hubfs/Imported_Blog_Media/image_thumb4-115.png>

A Logic App called **Send-SecureScoreReductionAlert** with 2 API Connection called **office365** and **azuremonitorlogs** been deployed.

You then need to grant **Reader** permission to the subscription(s) you want to get monitored for Secure Score reduction by accessing the Subscription Access Control blade

<https://www.cubesys.com.au/hubfs/Imported_Blog_Media/image_thumb5-73.png>

Then select the **Reader** role to be assigned to a **Logic App** and then select the **Send-SecureScoreReductionAlert**

<https://www.cubesys.com.au/hubfs/Imported_Blog_Media/image_thumb7-45.png>

Then go back to the resource group where the playbook has been deployed to edit the **office365** API connection

<https://www.cubesys.com.au/hubfs/Imported_Blog_Media/image_thumb8-34.png>

Access the **Edit API connection** and then hit the **blue** ribbon to **Authorize** the connection; an authentication prompt may appear to ask you to sign in

<https://www.cubesys.com.au/wp-content/uploads/2020/08/image_thumb9-23.png>

You should then see a **blue notification** on top if the authorization has been successful; you can now save the modification

<https://www.cubesys.com.au/hubfs/Imported_Blog_Media/image_thumb11-22.png>  <https://www.cubesys.com.au/hubfs/Imported_Blog_Media/image_thumb12-12.png>

Repeat the same with the other API connection **azuremonitorlogs**

You can review above operations has been successful by accessing the **Send-SecureScoreReductionAlert** Logic app and then looking at the **Run query and list results** action available within the **For Each** loop using the **Logic app designer** blade; you should see the **Connected to azuremonitorlogs** information

<https://www.cubesys.com.au/hubfs/Imported_Blog_Media/image_thumb13-9.png>  <https://www.cubesys.com.au/hubfs/Imported_Blog_Media/image_thumb14-4.png>

Then you can force an initial run using the **Run Trigger**

<https://www.cubesys.com.au/hubfs/Imported_Blog_Media/image_thumb15-6.png>

Then if the reduction threshold is reached you will get the following type of notification

<https://www.cubesys.com.au/hubfs/Imported_Blog_Media/image_thumb16-4.png>

[View full post](https://www.cubesys.com.au/blog/azure-you-can-now-get-notification-when-your-secure-score-downgrade)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "cubesys"
  },
  "dateModified" : "2025-02-21T15:34:17.736Z",
  "datePublished" : "2020-08-20T14:00:00Z",
  "headline" : "Azure – You can now get notification when your Secure Score downgrade",
  "image" : {
    "@type" : "ImageObject",
    "height" : 60,
    "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
    "width" : 60
  },
  "mainEntityOfPage" : "https://www.cubesys.com.au/blog/azure-you-can-now-get-notification-when-your-secure-score-downgrade",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Latest News"
  }
}
```