Exceptions Configuration permissions - Configure issue exclusion permissions. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation

Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-30
Category
Administrator Guide
Abstract

Configure issue exclusion permissions.

Exceptions Configuration permission controls how security teams manage alert/issue suppression and exception workflows. It provides mechanisms to:

  • Suppress false-positive issues by creating exclusion rules that automatically prevent matching issues from being generated.

  • Manage exception rules that define conditions under which issues are treated as exceptions (requiring approval workflows).

  • Configure approval workflows for exception management, including designating approvers and toggling approval requirements.