Preventing Access to "Resolve & Create Exclusion " based on Role

michaelsysec242 — Thu, 20 Nov 2025 12:32:11 GMT

Hello Livecomm,

I have a trivial question. Does anyone know how to prevent users from a specific role to '"Resolve & Create Exclusion " when closing a case?

I have reviewed the various options the role provides but there is no mention of this feature. We want to prevent low level analysts from using this feature.

Many thanks,

MSysec

topic Preventing Access to "Resolve & Create Exclusion " based on Role in Cortex XSIAM Discussions

Preventing Access to "Resolve & Create Exclusion " based on Role