Our scenario we have a SOC team of over 100+ users that need to have a change applied in QRadar Console.
In this particular case, Resource Restrictions of a specific user role.
In the current build you will have to make this change one user at a time.
The supported form to change the role to the user, is by
This becomes time consuming and tedious and around the 30th to 50th user you might loose your place holder or make mistakes.
Why is it useful?
|Who would benefit from this IDEA?||All clients with the SIEM platform enable them modify multiple users|
How should it work?
1.All you to apply changes to a batch users in QRadar.
2. Give a confirmation screen with a list of the users you are making the change to be confirming and Deploying Changes
|Priority Justification||Client request to have this added into QRadar|
|Customer Name||South Carolina Department of Administration|