The Microsoft Sentinel solution for Microsoft Business Applications allows customers to monitor and detect various suspicious or malicious activities in their Microsoft Power Platform and Microsoft Dynamics 365 environments.

It collects activity logs from different Power Platform components—including Power Apps, Power Automate, Power Platform Connectors, Power Platform DLP, and Dataverse—as well as Dynamics 365 CRM and ERP. It then analyzes these logs to detect threats and suspicious activities such as Power Apps execution from unauthorized geographies; suspicious data destruction by Power Apps; mass deletion of Power Apps; phishing attacks made possible through Power Apps; Power Automate flow activity by departing employees; Microsoft Power Platform connectors added to an environment; and the update or removal of Microsoft Power Platform data loss prevention policies.

• The Microsoft Sentinel solution for Power Platform is currently in PREVIEW. The Azure Preview Supplemental Terms include additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
• The solution is a premium offering. Pricing information will be available before the solution becomes generally available.