Collaboration User
MSSPs can now easily collaborate, run joint investigations, and chat about cases in real-time with their customers. In addition, all the features added for the Collaboration user can also be used by Enterprise customers for their needs.
A new Collaborator license type has been added to the platform to support this feature and a new Collaborator permissions group has been added to the Permissions Settings screen. The collaboration user can access the following places in the Platform:
- Dashboards
- Reports
- Search
- Cases: where the collaborator can see an Alert Overview specifically designed with information for that collaborator (based on SOC role).
- Command Center
- Advanced Reports
- Homepage: where the collaborator user has access to a new tab called My Requests. In this tab will be displayed all the requests that the MSSP has defined in the new Requests screen.
Note that you can now assign a Manual action (or an entire Playbook block) in the Playbook to a specific user as well as writing a targeted message to this user. The user will see this message waiting for them in both the Pending Actions widget in the Playbook customized overview and in the Homepage. For more information, see Assign Actions and Playbook Blocks.
Automated Requests
A new Requests screen in the Settings > Environments allows the MSSP (or indeed the central NOC of an Enterprise company) to define all different types of automated procedures which can then be requested by the end user in the Homepage. So for example, let’s say the MSSP defined a playbook which allows the user to block an IP without having to use a separate Integration.
The MSSP creates the request by filling out a simple form. In this case the request name would be Block IP and the request type would be IP. The form contains the following:
Name, Environment, Request Type, Event Fields which include Field Name, Field Watermark and Map Field as.
Once the request has been created, the end-user can select the request from the Homepage, enter the relevant details and then the Request is entered into the Platform as an actual case.
This entire process transforms the Siemplify Platform into a working ticketing system portal between the MSSP and Collaborator user or between Enterprise and end user.
For more information, see Benefits of adding a Collaborator User