Investigation and Response permissions - Configure investigation and response permissions, which include search, response, and automation permissions. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation

Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-04
Category
Administrator Guide
Abstract

Configure investigation and response permissions, which include search, response, and automation permissions.

Investigation and Response permissions are split as follows:

  • Search permissions: Includes Query Library, Query Center, Forensics, and Graph Search

  • Response permissions: Includes Action Center, EDL, Agents Script Library, and Live Terminal.

  • Automation permissions: Includes Playbooks, Scripts, Playground, and Automation Exclusion Center.