Investigation is complete but unable to view

If you are unable to view an investigation that is complete in IBM® Security Threat Investigator, verify that you are authorized to view cases.

If the case is disabled and shows Not authorized, it means you do not have access to view the case and cannot view the investigation. Either that is normal because you shouldn't have access to it or maybe you are in a demo situation and you have forgotten to get added to the case or a group that the case belongs to.

Case Management has its own access controls so to view the investigation of a case, you either need to be the owner or a member of the case, or a member of a group assigned to the case. If you cannot view the case in the Cases app, you also cannot view the investigation of the case in the IBM Security Threat Investigator app.