Exceptions Configuration permissions

Configure issue exclusion permissions in Cortex XSIAM.

Exceptions Configuration permission controls how security teams manage alert/issue suppression and exception workflows. It provides mechanisms to:

• Suppress false-positive issues by creating exclusion rules that automatically prevent matching issues from being generated.

• Manage exception rules that define conditions under which issues are treated as exceptions (requiring approval workflows).

• Configure approval workflows for exception management, including designating approvers and toggling approval requirements.

For detailed access guidance, see:

• Issue Exclusions permissions

• Exception Management Admin permissions

• Exception Approver Admin permissions