Updating orchestration and automation customization settings

You must do your orchestration and automation customizations and playbook design in the Provider account and then push the updated settings to the Standard accounts.

You must have permissions to access the IBM® Security QRadar SOAR Customization Settings page:
  • Admin access to Orchestration & Automation from the General settings > User management page in IBM Security QRadar Suite
  • A role assigned in SOAR that includes Administration and Customization Permissions

To access the orchestration and automation settings, from the Provider account menu, click Application settings > Case Management > Customizations.

For information about the various tabs and settings, use the Playbook designer. After you complete the configuration, do a configuration push to update the configuration in the Standard accounts, described in Pushing configuration changes.