By default, all new offenses are unassigned. You can assign an offense to an IBM®
QRadar® user for investigation.
About this task
When you assign an offense to a user, the offense is displayed on the My
Offenses page for that user. You must have the Assign Offenses to
Users permission to assign offenses to users. For more information about user role
permissions, see the IBM
QRadar Administration Guide.
You can assign offenses to users from either the Offenses tab or
Offense Summary pages. This procedure provides instruction on how to assign
offenses from the Offenses tab.
Procedure
- Click the Offenses tab.
-
Select the offense that you want to assign.
To assign multiple offenses, hold the Control key while you select each offense.
-
From the Actions list, select Assign.
-
In the Assign To User list, select the user that you want to assign this
offense to.
Note: The Assign To User list displays only those users who have privileges
to view the Offenses tab. The security profile settings for the user are
followed as well.
- Click Save.
Results
The offense is assigned to the selected user. The User icon is
displayed in the Flag column of the Offenses tab to indicate that the offense
is assigned. The designated user can see this offense on the My Offenses page.