Exceptions Commands

• createException
• getExceptionManagementSettings
• getGlobalExceptions
• getIssueExceptionRules

createException

---

Creates an issue exception based on the provided filter rule and justification.

Arguments

Argument Name	Description	Required
name	The human-readable name for the exception.	Required
rule	A JSON-encoded string representing a filter rule (standard Cortex AND/OR format) defining which issues the exception applies to. Provide only the AND/OR tree. For example: "{"AND":[{"SEARCH_FIELD":"id","SEARCH_TYPE":"EQ","SEARCH_VALUE":"100"}]}".	Required
justification_text	The free-text justification explaining why the exception is needed.	Required
justification_category	The category of justification for the exception. Possible values are: Compensating Control, Planned Remediation, Risk Accepted, Vendor Dependency.	Required
expiration_ts	The expiration date/time. Accepts relative ('30 days') or absolute ('2026-01-01T00:00:00Z') values.	Required
approver_email	The designated approver's email. Required only when the tenant approval workflow is enabled; must match a configured approver.	Optional
external_exception_id	An optional external tracking ID for the exception.	Optional
approval_justification	A free-text justification for the approval decision.	Optional

Outputs

Core.IssueException.ExceptionID number

The unique identifier of the created issue exception.

getExceptionManagementSettings

---

Returns the issue exception approval settings and the list of configured approvers.

Arguments

There are no input arguments for this command.

Outputs

Core.ExceptionManagementSettings.ApprovalRequired boolean

Whether creating an issue exception requires an approver's decision.

Core.ExceptionManagementSettings.DisableExceptionEmailApprovalFlow boolean

Whether the email-based approval flow is disabled.

Core.ExceptionManagementSettings.Approvers.Name string

The display name of the approver.

Core.ExceptionManagementSettings.Approvers.Email string

The email address of the approver.

getGlobalExceptions

---

Returns the full global exceptions configuration applied across endpoints.

Arguments

There are no input arguments for this command.

Outputs

Core.GlobalException.profile_name string

The name of the global exceptions profile.

Core.GlobalException.usage_count number

The number of times the global exceptions profile is used.

Core.GlobalException.description string

The description of the global exceptions profile.

Core.GlobalException.creation_time number

The creation timestamp of the global exceptions profile (epoch milliseconds).

Core.GlobalException.created_by string

The user who created the global exceptions profile.

Core.GlobalException.modification_time number

The last modification timestamp of the global exceptions profile (epoch milliseconds).

Core.GlobalException.modules unknown

The exception modules and their configured entries.

getIssueExceptionRules

---

Returns a list of issue exception rules based on the provided filter criteria.

Arguments

Argument Name	Description	Required
limit	The maximum number of exception rules to return. Ignored when 'page' or 'page_size' is provided. Default is 50.	Optional
page_size	The number of exception rules to return per page. When provided, manual pagination is used and 'limit' is ignored.	Optional
page	The page number to retrieve (0-based). When provided, manual pagination is used and 'limit' is ignored.	Optional
filter_object	A JSON string representing a raw filter object. If provided, this overrides all other filter arguments. Cannot be used together with other filter arguments.	Optional

Outputs

Core.ExceptionRule.exception_id number

The unique identifier of the issue exception rule.

Core.ExceptionRule.name string

The name of the exception rule.

Core.ExceptionRule.status string

The status of the exception rule.

Core.ExceptionRule.rule string

The filter rule defining which issues the exception applies to.