FortiSOAR Knowledge Base
FortiSOAR: Security Orchestration and Response software provides innovative case management, automation, and orchestration. It pulls together all of an organization's tools, helps unify operations, and reduce alert fatigue, context switching, and the mean time to respond to incidents.
RuiChang
Staff
Staff
Article Id 310972
Description

 

This article provides a method to display active users only for people who lookup fields

Scope

 

FortiSOAR v7.0.1 and above.

 

Solution

 

In FortiSOAR v7.0.1 onward, new features are added for the People Lookup Field in the Module to display active users only for ease of searching and filtering when dealing with Incident Response.

 

By default, Incident Response will display all the users in the people lookup field such as the 'Assigned to' field in the Alerts Module.

 

RuiChang_0-1713838743527.png

 

In that case, it will be difficult for users with multiple accounts to filter the incident efficiently. Hence, the features below can remove inactive users from the selection.

 

Go to FortiSOAR GUI -> Setting -> Application Editor -> Modules > Alerts -> Field Editor -> Assigned to -> Filter Setting, enable 'Only show active users' -> Apply -> Save & Publish All Modules.

 

RuiChang_0-1713838762943.png

 

Note:

Any field with the LOOKUP field type will have these features and will be disabled by default. After that, Only active users will be visible in the 'Assigned to' filter:

 

RuiChang_0-1713838780783.png

 

Related document:

New features and enhancements

Contributors