XSIAM Report

bridgetlitt — Wed, 15 Jul 2026 04:54:06 GMT

What do “Restricted” and “Public” actually mean in an XSIAM report template? If I set the report template I created to “Restricted,” does that mean I won’t be able to schedule the report to be sent to an external email address, and that it will only work when I manually generate it within XSIAM?

Re: XSIAM Report

rpasca — Fri, 17 Jul 2026 09:24:59 GMT

Hi Bridgetlitt,

Hope you're doing well!

The Restricted vs. Public options were recently introduced to control who can view or edit the Report Templates.

By default, this feature is set to Restricted, which means you (or the Report Template owner) must grant access to other users if you want them to view or edit a specific template. If you don't require this level of security, switching it to Public will provide access to all XSIAM tenant users, as long as they have the necessary roles, similar to how it was before the recent upgrade.

This new access management feature will not affect the Reports themselves.

I'm including some documentation links where you can find more detailed information:

- Release notes (XSIAM 3.5) when this change was introduced. You will also see that the same improvement was added for Scripts, Playbooks, etc.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-3.x-Release-Notes/Changed-Features?tocId=RfkP70KaxKUQovaPoRXWfQ

- Manage your report templates:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-3.x-Documentation/Report-templates

- Manage access to objects, where you can find more info about Restricted/Public:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-3.x-Documentation/Manage-access-to-objects

I hope this helps!

Raúl P

topic Re: XSIAM Report in Cortex XSIAM Discussions

XSIAM Report

Re: XSIAM Report