Assign User To Investigation - BlinkOps Documentation

Assign a user to an investigation by its ID.

External DocumentationTo learn more, visit the Rapid7 InsightIDR documentation.

Parameters

Parameter	Description
Investigation ID	The ID of the investigation to assign a user to.
Multi Customer	When selected, investigations will be returned from all organizations the connected user has access to. Note: This feature is available for multi-customer user keys only.
User Email Address	The email address of the user to assign the investigation to.

Example Output

{
	"rrn": "rrn:investigation:us1:174e4f99-2ac7-4481-9301-4d24c34baf06:investigation:6A74T2A4",
	"organization_id": "174e4f99-2ac7-4481-9301-4d24c34baf06",
	"title": "Jane Smith enabled account Roger Johnson",
	"source": "ALERT",
	"status": "OPEN",
	"priority": "CRITICAL",
	"last_accessed": "2018-06-06T16:56:42Z",
	"created_time": "2018-06-06T16:56:42Z",
	"disposition": "BENIGN",
	"assignee": {
		"name": "Ellen Example",
		"email": "example@test.com"
	},
	"first_alert_time": "2018-06-06T16:56:42Z",
	"latest_alert_time": "2018-06-06T16:56:42Z",
	"tags": [
		"Incident",
		"Security Test"
	],
	"responsibility": "CUSTOMER"
}

Workflow Library Example

Assign User to Investigation with Rapid7 Insightidr and Send Results Via Email

Preview this Workflow on desktop

Overview Close Multiple Investigations

⌘I

​Parameters

​Example Output

​Workflow Library Example

Parameters

Example Output

Workflow Library Example