Groups

You can create groups of predefined users to easily add the users to cases together. For example, you might have different teams who are added to a case or incident based on the case or incident type, location, or whether there is a malware component to the case. You create groups from the Groups tab.

To create a new group:
  1. From main menu, select Application settings > Case Management > Permissions and access.
  2. Click the Groups tab and then Create Group.
    the surrounding text describes this graphic.
  3. Enter a name for the group.
  4. If you want to allow this group to own incidents, check the Allow Incident Ownership box.
  5. If you want the group that you are creating to be the default group for incidents that do not have an owner assigned, check the Default Incident Owner.
  6. If you want to allow this group to be assigned and own tasks, check the Allow Task Ownership box.
  7. In the Global Role section, assign global roles to the group that you are creating, if required.
  8. Add users to the group by searching for and selecting them from the Search: Users box under the Members section.
  9. In the Workspace section, assign any workspace roles to the group, as required.
  10. When you finish, click Create.

You can modify an existing group by selecting it in the list, making your modifications and saving. You can also add users to existing groups from the Users tab.

The Default Incident Owner Group is used by the application as the default owner of incidents that do not have an owner assigned during incident creation. This group is used to assign incidents created by integrations or external scripts when the incident owner is not specified during incident creation.

You can choose another group as the default group by selecting Default Incident Owner when creating or editing the group. Only one group can be the default group.