FortiSOAR: Security Orchestration and Response software provides innovative case management, automation, and orchestration. It pulls together all of an organization's tools, helps unify operations, and reduce alert fatigue, context switching, and the mean time to respond to incidents.
This article describes how to overcome the permission issue for the user configured in Symantec DLP connector.
Scope
FortiSOAR and Symantec DLP integration.
Solution
A few things have to be verified:
The user has read and Write Permission for the Incidents on the DLP Side.
The role assigned to the user must have admin privileges.
Verify if there are any conditions applied in the Incident Access Tab on the Symantec-DLP side.
Confirm if the reports used as input in connector action were created using the 'Enforce Server administration console'.
The Report ID to be used in the connector action is created by the configured user or the user must be in the group with the user who has created the report.
