Restrict Actions for Custom Locked Content Items

In Cortex XSOAR 6.13, restrict tenant actions for custom locked content.

This feature is applicable in multi-tenant environments. The feature enables you to restrict actions such as downloading, cloning, and viewing code for custom locked content items on the tenant account. Users who are local to the tenant are not able to:

• Clone, detach, download, or view automation code.
• Clone or view integration codes.
• Download or clone playbooks.

When the feature is enabled, changes in the following pages are visible in tenant accounts:

• In the Automations page, the script and all action buttons are hidden.

  

  mt-restrict-settings-automations.png
• In the Integrations page, the view and copy buttons are not visible for custom hidden integrations.

  

  mt-restrict-settings-integratons.png
• In the Playbooks page, the duplicate and download action buttons are disabled for custom locked playbooks. Task scripts are not available for view if custom locked scripts are used.

  

  mt-restrict-settings-playbooks.png

Note

The restrictions in this feature do not apply to users of the main account who are accessing the tenant account.

To restrict actions for custom locked content items, perform the following server configuration.

1. Go to Settings → About → Troubleshooting in the main account.
2. In the Server Configuration section, click Add Server Configuration.
3. Enter the key server.restrict.custom.locked.content.actions with a value of true. Changes apply to all tenant accounts.