Add Propagation Labels to Content - Multi-Tenant Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Multi-Tenant Guide
Product
Cortex XSOAR
Version
8
Creation date
2024-02-14
Last date published
2024-04-14
Category
Multi-Tenant Guide
Solution
Cloud
Abstract

Apply propagation labels to control which content is synced from the main tenant to child tenants in a Cortex XSOAR multi-tenant deployment.

You can add propagation labels when creating a new content item or when editing an existing item.

The default propagation label for all content items is all.

Tip

We recommend that you first apply propagation labels to your child tenants and then add the corresponding labels to the content items that you want to sync to the tenants.

The following content items support propagation labels:

  • Playbooks

  • Scripts

  • Integrations

  • Indicator fields

  • Incident fields

  • Evidence fields

  • Indicator types

  • Incident types

  • Pre-process rules

  • Lists

  • Widgets

  • Dashboards

  • Incident layouts

  • Indicator layouts

Note

When installing a content pack from the Marketplace, the default propagation label is set to all. If you want to change the propagation label, after installation, go to the INSTALLED CONTENT PACKS tab in the Marketplace page and click the propagation button for the content pack. If a content item is part of a content pack and it is not specifically labeled, it inherits the content pack’s propagation labels. If labels are specified, it propagates according to those labels.

For a non-content item such as an integration instance, if you want to propagate the instance, you need to apply propagation labels both to the integration and to the instance. If a tenant does not have the integration installed, the instance will not be propagated even if the propagation label exists both on the main tenant and child tenant .

If you want to create new propagation labels, or add existing ones, ensure that you have the required permissions.

  1. Go to the content item that you want to add a propagation label to.

  2. In the Propagation Labels field add the relevant labels by either selecting an existing label or typing a new label. After typing a new label and pressing Enter, the label is available immediately for use. If you instead keep the default all label, the content syncs to all child tenants.