https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/cannot-edit-indicator-in-multi-tenant-account/m-p/456680#M485 <P>Hi,<BR />This is by design,<BR />since the indicator type object is created in the master- you cannot edit it in the tenant level, this is true for any object we have like incident fields, incident types, layouts, etc.<BR />If you want a different exclusion list for every tenant you could disable the indicator type in the master and re-create the same one manually in each tenant, this way you will be able to edit it differently for each tenant,<BR />thanks.</P> Tue, 04 Jan 2022 13:37:50 GMT gfilippov 2022-01-04T13:37:50Z https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/cannot-edit-indicator-in-multi-tenant-account/m-p/455888#M480 <P>I need to set in an indicator configuration to avoid the use of some instances for enrichment, but I'm not able to edit the indicator in an account of the multi-tenant deployment, (IP), In the master account I'm able to edit without problems, I tried changing some propagation labels and syncing the accounts with no successm what else can I do? I hope the pictures can explain it better.<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Captura de Pantalla 2021-12-29 a la(s) 14.39.24.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/38415iA7A9C6FCF9E1647D/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="Captura de Pantalla 2021-12-29 a la(s) 14.39.24.png" alt="Captura de Pantalla 2021-12-29 a la(s) 14.39.24.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Captura de Pantalla 2021-12-29 a la(s) 14.38.56.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/38416iDE45E31FFC74E0C2/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="Captura de Pantalla 2021-12-29 a la(s) 14.38.56.png" alt="Captura de Pantalla 2021-12-29 a la(s) 14.38.56.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Captura de Pantalla 2021-12-29 a la(s) 14.37.04.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/38417i9BF2A1826247FD88/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="Captura de Pantalla 2021-12-29 a la(s) 14.37.04.png" alt="Captura de Pantalla 2021-12-29 a la(s) 14.37.04.png" /></span></P> Wed, 29 Dec 2021 20:41:34 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/cannot-edit-indicator-in-multi-tenant-account/m-p/455888#M480 saulvargas 2021-12-29T20:41:34Z https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/cannot-edit-indicator-in-multi-tenant-account/m-p/456680#M485 <P>Hi,<BR />This is by design,<BR />since the indicator type object is created in the master- you cannot edit it in the tenant level, this is true for any object we have like incident fields, incident types, layouts, etc.<BR />If you want a different exclusion list for every tenant you could disable the indicator type in the master and re-create the same one manually in each tenant, this way you will be able to edit it differently for each tenant,<BR />thanks.</P> Tue, 04 Jan 2022 13:37:50 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/cannot-edit-indicator-in-multi-tenant-account/m-p/456680#M485 gfilippov 2022-01-04T13:37:50Z