Define auditors in the Incident Manager

Supported in:

An auditor is defined as an Incident Manager power user. The auditor is automatically added to every incident that is handled in the Incident Manager. They also have the ability to close and reopen incidents, as well as seeing closed incidents. Platform administrators are automatically considered as auditors.

Define an auditor

  1. Navigate to SOAR Settings > Incident Manager > Auditors.
  2. Click add Add Auditors.
  3. Choose the required user. This list is populated from any users in the system.
  4. Choose the required department. This list is populated from the list of departments you previously created in SOAR Settings.