Create a security type action to perform on behalf of your child tenants.
After you have created and assigned a configuration for each of your child tenant’s security actions, you can define the specific managed action on behalf of the child tenant.
Navigate to each of the following Cortex XSIAM pages:
→ → panel
→ → → panel
→ → → panel
→ → → → panel
→ → → → configuration panel
In the corresponding Configuration panel, select the you created and allocated to your child tenant.
The corresponding security action Table displays the actions managing the child tenant.
Depending on the security action, select:
+ Add BIOC to create a BIOC Rule.
+ New Exception to create a BIOC Exception.
+ Add Exclusion to create an Alert Exclusion.
+ Add Starring Configuration to create a started alert inclusion.
+ New Profile to create a new endpoint profile.
Note
Profiles you create are automatically cloned to your child tenants.