Assigning offenses to users

By default, all new offenses are unassigned. You can assign an offense to an IBM® QRadar® user for investigation.

About this task

When you assign an offense to a user, the offense is displayed on the My Offenses page for that user. You must have the Assign Offenses to Users permission to assign offenses to users. For more information about user role permissions, see the IBM QRadar Administration Guide.

You can assign offenses to users from either the Offenses tab or Offense Summary pages. This procedure provides instruction on how to assign offenses from the Offenses tab.

Procedure

  1. Click the Offenses tab.
  2. Select the offense that you want to assign.
    To assign multiple offenses, hold the Control key while you select each offense.
  3. From the Actions list, select Assign.
  4. In the Assign To User list, select the user that you want to assign this offense to.
    Note: The Assign To User list displays only those users who have privileges to view the Offenses tab. The security profile settings for the user are followed as well.
  5. Click Save.

Results

The offense is assigned to the selected user. The User icon is displayed in the Flag column of the Offenses tab to indicate that the offense is assigned. The designated user can see this offense on the My Offenses page.