Managing Shifts - Administrator Guide - 6.10 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide
Product
Cortex XSOAR
Version
6.10
Creation date
2022-10-13
Last date published
2024-10-07
End_of_Life
EoL
Category
Administrator Guide
Abstract

Define shifts for Cortex XSOAR roles. Add the roles to existing users. Assign the role to a playbook or automation as required.

You can define shifts for various roles and then add them to automations, playbooks and incidents.

  1. Define a Role.

  2. In the Shifts field, click Add Shift and add the required period.

    Weekly shifts start on Sunday and are specified in the UTC time zone format.

    For example, we create a role called First Shift and add a shift starting on Sunday and ending Monday.

    shift.png

  3. Click Save.

  4. (Optional) To add the role to a user, in the Users tab, select the user you want to add.

    roles.png

  5. Click Roles.

  6. From the drop down list select the role you created.

    add-roles.png

  7. Click Save.

    You can also assign the role to a playbook or automation as required.

  8. (Optional) You can view on-call users’ details in a dashboard by adding the required widgets.

    shift-dashboard.png

    When assigning an incident, you can manually assign it to analysts who are on-call or the incidents can be assigned automatically using for example the AssignAnlystToIncident automation.