Playground permissions - Configure Playground permissions. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation

Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-04
Category
Administrator Guide
Abstract

Configure Playground permissions.

Controls Playground Investigation & ResponseAutomationPlayground, which is a testing environment for commands and scripts that is not connected to a live (active) investigation. For more information, see Use the War Room in an investigation.

Permission

Description

Roles Example

None

Users cannot access the Playground page and cannot test commands, scripts, and integrations.

SOC Tier-1 analysts: Do not need Playground access for basic triage.

View/Edit

Users can access the Playground page and can test commands, scripts, and integrations.

SOC Tier 2 and 3 Analysts, Security Engineers, and Security Admins: Benefit from playground access for testing and learning.