Cortex XDR 5.x
Investigation and Response permissions
Configure investigation and response permissions, which include search, response, and automation permissions.
Investigation and Response permissions are split as follows:
Search permissions: Query Library, Query Center, Forensics, Host Insights, and Graph Search.
Response permissions: Action Center, EDL, Agent Scripts Library, and Live Terminal.
Automation permissions: Playbooks, Scripts, Playground, and Automation Exclusion Center.
Last updated
Was this helpful?
