Add Propagation Labels to Content - Multi-Tenant Guide - 6.12 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Multi-Tenant Guide

Product
Cortex XSOAR
Version
6.12
Creation date
2023-04-30
Last date published
2023-12-18
Category
Multi-Tenant Guide

You can add propagation labels when creating a new content item or when editing an existing item.

The default propagation label for all content items is All.

Tip

We recommend that you first apply propagation labels to your tenant accounts and then add the corresponding labels to the content items that you want to sync to the tenants.

The following content items support propagation labels:

  • Playbooks

  • Scripts

  • Integrations

  • Indicator fields

  • Incident fields

  • Evidence fields

  • Indicator types

  • Incident types

  • Pre-process rules

  • Lists

  • Widgets

  • Dashboards

  • Incident layouts

  • Indicator layouts

Note

When installing a content pack from the Marketplace, the default propagation label is set to all. If you want to change the propagation label, after installation, go to the INSTALLED CONTENT PACKS tab and click the propagation button. If a content item is part of a content pack and it is not specifically labeled, it inherits the content pack’s propagation labels. If labels are specified, it propagates according to those labels.

For a non-content item such as an integration instance, if you want to propagate the instance, you need to apply propagation labels both to the integration and to the instance. If a tenant does not have the integration installed, the instance will not be propagated even if the propagation label exists both on the main account and tenant account.

If you want to create new propagation labels, or add existing ones, ensure that you have the required permissions.Role-based Permission Levels

  1. Go to the content item that you want to add a propagation label to.

  2. In the Propagation Labels field add the relevant labels.

    • Select an existing label.

    • Type a new label and press Enter. The label is immediately available to select in the platform.

    • Keep the All label to sync this content item to all tenant accounts.