Automation scripts are individual code entities used to perform specific actions within a playbook or as standalone commands in the CLI. On the Scripts page ( → → ), you can view, edit, and create scripts in JavaScript, Python, or PowerShell.
When creating a script, you can access all APIs, including cases and investigations, and share data in the War Room. Scripts can receive and access arguments and can be password-protected.
Prerequisite
To work with scripts, an administrator must configure your user role with specific RBAC permissions. Permissions must be enabled in the following order:
Scripts: This component (under → ) must be set to Enabled first. It is the foundational permission for all automation; if Scripts are not enabled, you cannot configure Playbooks or Cases and Issues. Role-level permissions determine your ability to create new scripts or edit those marked as Public. For detailed information on the access model, see Access to scripts.
Playbooks: Once Scripts are enabled, you can set Playbooks (under → ) to Enabled.
Cases and Issues: Finally, you can set Cases and Issues (under Cases & Issues) to View or View/Edit. This is required to view the results of scripts executed within an investigation.
Automation Engineer agent
Use the AI-powered Automation Engineer agent to simplify Python script creation and management through an intuitive, interactive experience. It enables you to generate, modify, and query automation scripts with the Agentic Assistant natural language chat prompt. For example, within the chat, you can ask the agent to explain the specific script currently open or pose general technical questions regarding script logic and the AgentiX SDK.
For more details about using the Automation Engineer agent, see Use the Automation Engineer agent to accelerate script development and deployment.
Important
The Automation Engineer agent is available when the Agentic Assistant feature is enabled, for users with script editing permissions. For more information, see Cortex Agentic Assistant and Agentic Assistant role-based access control.