Sync Content to Tenant Accounts - Multi-Tenant Guide - 6.12 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Multi-Tenant Guide

Product
Cortex XSOAR
Version
6.12
Creation date
2023-04-30
Last date published
2023-12-18
Category
Multi-Tenant Guide

The content that you sync from the Main Account to the tenant accounts might add, override, or remove content from the tenant accounts. New content items, which do not currently exist on the tenants, are added. When you sync content to tenant accounts, there can potentially be content items that will be added.

  • Add: New content items, those which do not currently exist on the tenants, will be added.

  • Override: For content items that are being pushed in the sync operation and which already exist on the tenants, the sync operation will override the existing content on the tenant accounts.

  • Remove: For content items that were removed from the main account and which already exist on the tenant accounts, the sync operation will remove the existing content from the tenant accounts.

It is important that you review each content item and their dependencies before syncing the content. You have the option to remove items before executing the sync operation for a single tenant.

Note

If you are using version control and need to revert to an earlier version of a content item and to push this change to tenant accounts, selective propagation must be enabled.

Before you begin, ensure that you have the necessary permissions to sync accounts.Role-based Permission Levels

  1. In the Main Account, go to SettingsAccount Management.

  2. Select one of the following options to sync content.

    1. (Option 1) To review the content you want to sync to a tenant, select the required tenant checkbox and then click Sync.

      1. Review all content affected by the sync operation in the ADD, OVERRIDE, REMOVE tabs.

      2. If there are playbooks listed in the OVERRIDE tab, select or clear checkbox to Override playbook inputs in the tenant account.

      3. If the Run on field has changed in the automation, select or clear the Overwrite automation run-on to override this field in the tenant account.

    2. (Option 2) To sync content to tenant accounts without manual review, select two or more tenant accounts and then click Sync.

      This option automatically updates new, and existing content to the tenant account, and removes outdated content. If there are playbooks and automations select or clear the checkbox to override playbook inputs and the Run on automation field in the tenant account.

  3. Click Sync.