> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-commands-guide/exceptions-commands.md).

# Exceptions Commands

* [createException](#createexception)
* [getExceptionManagementSettings](#getexceptionmanagementsettings)

#### createException

***

Creates an issue exception based on the provided filter rule and justification.

<details>

<summary>Arguments</summary>

| Argument Name           | Description                                                                                                                                                                                                                                                | Required |
| ----------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------- |
| name                    | The human-readable name for the exception.                                                                                                                                                                                                                 | Required |
| rule                    | A JSON-encoded string representing a filter rule (standard Cortex AND/OR format) defining which issues the exception applies to. Provide only the AND/OR tree. For example: "{"AND":\[{"SEARCH\_FIELD":"id","SEARCH\_TYPE":"EQ","SEARCH\_VALUE":"100"}]}". | Required |
| justification\_text     | The free-text justification explaining why the exception is needed.                                                                                                                                                                                        | Required |
| justification\_category | The category of justification for the exception. Possible values are: Compensating Control, Planned Remediation, Risk Accepted, Vendor Dependency.                                                                                                         | Required |
| expiration\_ts          | The expiration date/time. Accepts relative ('30 days') or absolute ('2026-01-01T00:00:00Z') values.                                                                                                                                                        | Required |
| approver\_email         | The designated approver's email. Required only when the tenant approval workflow is enabled; must match a configured approver.                                                                                                                             | Optional |
| external\_exception\_id | An optional external tracking ID for the exception.                                                                                                                                                                                                        | Optional |
| approval\_justification | A free-text justification for the approval decision.                                                                                                                                                                                                       | Optional |

</details>

<details>

<summary>Outputs</summary>

**Core.IssueException.ExceptionID** *number*

The unique identifier of the created issue exception.

</details>

#### getExceptionManagementSettings

***

Returns the issue exception approval settings and the list of configured approvers.

**Arguments**

There are no input arguments for this command.

<details>

<summary>Outputs</summary>

**Core.ExceptionManagementSettings.ApprovalRequired** *boolean*

Whether creating an issue exception requires an approver's decision.

**Core.ExceptionManagementSettings.DisableExceptionEmailApprovalFlow** *boolean*

Whether the email-based approval flow is disabled.

**Core.ExceptionManagementSettings.Approvers.Name** *string*

The display name of the approver.

**Core.ExceptionManagementSettings.Approvers.Email** *string*

The email address of the approver.

</details>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-commands-guide/exceptions-commands.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.