Investigation is complete but unable to view

If you are unable to view an investigation that is complete in IBM® Security Threat Investigator, verify that you are authorized to view cases.

If it is showing Not authorized when you click on the Threat Investigation tab within the case, it means you do not have access to view the investigation. You must have the Threat Investigator user role to view the investigation.

Case Management has its own access controls so to view the investigation of a case, you either need to be the owner or a member of the case, or a member of a group assigned to the case. If you cannot view the case in the Cases app, you also cannot view the investigation of the case.