Restrict access to certain major security incidents

Manage access to sensitive major security incidents by restricting view and modify permissions to authorized users and groups.

Before you begin

Role required: sn_msi.workspace_manager

Users with the admin role can also view the major security incident regardless of the allowed members or groups list. The admin role includes the sn_msi.restriction_access_admin role, which bypasses the enforce restriction check. This behavior applies in both Workspace and classic UI.

About this task

Use restrictions to control which users and groups can view or modify specific major security incidents. After enforcement, only authorized members, workspace managers, and users with the admin role can access the restricted incidents.

Procedure

1. Navigate to Workspaces > Major Security Incident Management > Major Security Incidents.
2. Select the Lists view.
3. Choose the required major security incident record.
4. Select the Details tab.
5. Scroll down and select the Restriction section.
6. Select the Enforce restriction check box to enable the restriction of the major security incident.

   Figure 1. Restrict access to major security incidents

   

7. In the Allowed members field, select the users who can view or modify the major security incident using the Search option.
8. In the Allowed groups field, select the groups who can view or modify the major security incident using the Search option.
   Note:

   After the Enforce restriction check box is enabled for the major security incident, only the sn_msi.workspace_manager and allowed members or groups will have access to view or modify the major security incident.
9. Select Save.