Following the installation of ES, an admin configured users with the ess_user role the ability to close notable events.
How would the admin restrict these users from being able to change the status of Resolved notable events to Closed?
Following the installation of ES, an admin configured users with the ess_user role the ability to close notable events.
How would the admin restrict these users from being able to change the status of Resolved notable events to Closed?
To restrict users with the ess_user role from changing the status of Resolved notable events to Closed, the admin needs to modify the status transitions in the Status Configuration window. Specifically, the admin should select the Closed status and remove the ess_user role from the status transitions for the Resolved status.
Page 38. In Status Configuration, you select the "Resolved" then remove the user from the transition "Closed"
Configure >>> Incident Management >>> Status Configuration >>> Resolved.....
D - Settings > Roles > Edit
It is about Enterprise security ...