End-of-Life (EoL)

Restrict an Investigation

Follow these instructions to restrict an investigation.
You can restrict an investigation to the incident owner and the team associated with the investigation.
  1. Do one of the following:
    • Open the incident and select
      Actions
      Restrict incident
      .
      To remove the restriction select
      Actions
      Permit incident
      .
    • In the CLI, type
      /investigation_restrict id=
      id_ number
  2. (Optional)
    For Automation do the following:
    • Use the
      restrictInvestigation
      command in a playbook.
    • Specify the incident ID of the incident for which you want to restrict access.
    • Set the
      Restrict
      argument to
      True
      to restrict the incident.
    • Set the
      Restrict
      argument to
      False
      to remove restricted from the incident.

Recommended For You