Create and Allocate Configurations

From the Cortex® XDR™ management console, you can create and allocate configurations for child tenants.
To manage security actions on behalf of your child tenant, you need to first create and allocate an action configuration.
  1. Navigate to each of the following Cortex XDR pages and follow the detailed steps:
    • Rules
      BIOC
      Rules and Exceptions Configurations
      panel
    • Investigation
      Incident Management
      Exclusions
      Alert Exclusions Configuration
      panel
    • Investigation
      Incident Management
      Starred Alerts
      Starred Alerts Configuration
      panel
    • Endpoints
      Policy Management
      Prevention
      Profiles
      Profile Configuration
      panel
    • Response
      Action Center
      Currently Applied Actions
      Block List/Allow List
      Allow List/Block List
      configuration panel
  2. In the corresponding Configuration panel (1),
    + Create New
    (2) configuration.
  3. Enter the configuration
    Name
    and
    Description
    .
  4. Create
    .
    The new configuration (3) appears in the
    Configuration
    pane.
  5. Navigate to
    Settings
    Tenant Management
    .
  6. In the
    Tenant Management
    table, right-click a child tenant row and
    Edit Configurations
    .
  7. Assign the configuration you want to use to manage each of the security actions.
    You can configure
    Profiles
    only as
    Managed
    or
    Unmanaged
    . All profiles you create are automatically cloned to your child tenants.
  8. Update
    .
    The
    Tenant Management
    table is updated with your assigned configurations.

Recommended For You