Approval Requests

Overview

When an Approval Request or User Input task is executed during automatic playbook execution, the playbook pauses and waits for the user to act. Security analysts can view the list of pending requests in the Response > Approval Requests menu and process each request to allow the playbook to continue executing. Processed request history can be viewed in the Approval Logs menu.

Approval Request list

Go to Response > Approval Requests.

The list displays the following information:

• Type: The request type (Approval Request, User Input Request)
• Subject: The title of the approval request item
• Playbook Name: The name of the playbook that generated the request
• Requester: The entity that generated the request (always displayed as System)
• Requested at: The date and time the request was registered (yyyy-MM-dd HH:mm:ss format)

Search request history

You can search the Approval Request list by setting date range and keyword filter conditions.

Download list

Click to download the Approval Request list in CSV, Excel XML, MS Word, HTML, or JSON format.

File Name

Enter the file name to save.

Search

Search for a column by name in the column list to save.

Columns

Select the columns to include in the file.

File Format

Select the file format type.

Encoding

Select the file encoding.

Range

Select the range of Approval Request records to save. The topmost item on page 1 is number 1.

Refresh list

Click to refresh the list.

Handle Approval Requests

Clicking an item in the list opens a detail side panel on the right. Depending on the request type, either a Create Approval Request panel or a User Input Request panel opens.

Create Approval Request

Clicking a request item generated by the playbook's Approval Request task opens the Create Approval Request panel.

• Requested at: The date and time the approval request was registered
• Playbook Name: The name of the playbook that generated the request. Click the Playbook History button to navigate to the corresponding playbook execution screen in Playbook History.
• Playbook Task Name: The name of the playbook task that generated the request
• Subject: The title of the approval request item
• Content: The body content of the approval request
• Enter reason: Enter the reason for approval or rejection.

Click the Reject or Approve button at the top of the panel to process the request.

User Input Request

Clicking a request item generated by the playbook's User Input task opens the User Input Request panel.

• Requested at: The date and time the user input request was registered
• Playbook Name: The name of the playbook that generated the request. Click the Playbook History button to navigate to the corresponding playbook execution screen in Playbook History.
• Playbook Task Name: The name of the playbook task that generated the request
• Subject: The title of the user input request item
• Content: The body content of the user input request
• User Input: The value to be entered by the user. The input method varies depending on the request type:
  • enum: Select one option from a predefined list of choices.
  • boolean: Select Yes or No.
  • multiline: Enter multi-line text.
  • Default: Enter a single line of text.

Click the Apply button to pass the entered value to the playbook and resume execution.