Sharing Cases
A case can be shared with other organisations within the same Energy SOAR instance. Sharing gives analysts in the target organisation read or write access to the case, its tasks, and its observables, according to the profile assigned to the share.
The Sharing tab is available in the case detail view. It requires the organisation link between the two organisations to be configured by an administrator beforehand in Admin > Organisations.
Viewing existing shares
The tab header reads: The current case is shared with the following organisation(s).
The table shows one row per share with three columns:
Organisation — name of the organisation the case is shared with.
Profile — the access profile that controls what the target organisation can see and do with the case.
Shared At — the date the share was created.
Adding a share
Click the + button (tooltip: Add Share) to open the add-share dialog. Fill in:
Organisation — select the target organisation from the list of linked organisations.
Profile — select the access profile to grant.
Tasks — toggle whether the case tasks are included in the share.
Observables — toggle whether the case observables are included in the share.
Click to confirm. The new share appears in the table immediately.
Removing a share
To remove a share, click the delete icon on the share row. A confirmation dialog (Remove case share) asks: Are you sure you want to remove this sharing rule? Confirm to revoke the share. The target organisation loses access to the case.
Updating a share profile
To change the access profile of an existing share, click the edit icon on the share row, select the new profile, and save. The change takes effect immediately.