Automation permissions - Configure access to automated response workflows, custom scripts, testing environments, and exclusion policies. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation

Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-16
Category
Administrator Guide
Abstract

Configure access to automated response workflows, custom scripts, testing environments, and exclusion policies.

This section covers permissions for playbooks, scripts, playground, and the Automated Exclusion Center.

Caution

Cortex XSIAM enforces a strict permission dependency chain for automation and case management. You must grant at least View access to Scripts before you can grant access to Playbooks. Consequently, you must grant at least View access to Playbooks before you can enable Cases & Issues.