Step 1. Create linked record configuration for a Security Case
- UpdatedJan 30, 2025
- 3 minutes to read
- Yokohama
- Security Operations
Create a Linked Record configuration for a Security Case.
Before you begin
Role required: admin and sn_msi.workspace_admin
Note: The system admin can create the
record and MSI workspace admin can update it.
Procedure
- Search for the Linked Record Configuration from the left navigation.
-
Click New.
-
Fill the form with the required columns and write a field mapping script.
-
You have now created a linked record configuration for the Security Case by
adding the values as described in the following table.
Name Description Source Table Security Case (sn_ti_case). Here in this example, link/promote/propose a security case as MSI. Order Input value: 300 Note: Lower the order takes precedence over higher orders. As a Security Case have a higher order than the Security Incident and Remediation Task, it will appear in the last sequence.Can promote to MSI True, select this check box to promote the security case to MSI. Note:- Link and Unlink security case records to major
security incidents both from Major Security Incident Management workspace. Also,
Unlink record functionality is visible only for
the linked records.
- This will enable the link, promote, and propose to Security Case to Major Security Incident using classic environment actions, but those UI actions will not be available out of the box. Each UI action needs to be created manually. For more information, see Step 3. Create UI actions for the Source Table for a Security Case.
- Link/Promote/Propose UI action are available for Security Incident, Remediation Task, and Security Case out of the box.
- MSIM workspace linked record page will show the linked Security Case records.
Refer to the below image 1 to view the options available after selecting this check box.
Modal List View msim_sn_ti_case_model_view Note: This view contains fields and fields order shown in list view on the Link Record Modal in MSIM workspace. For more information, see Step 2. Create a view for modal window for a Security CaseRefer to the below image 2 to view from the Linked Records page.
Field Mapping Script This script describes the fields from source tables record will mapped to newly created major security incident when source tables record is getting proposed or promoted. which will receive inputs:- sourceGr: security case glide record object
- msiGr: major security incident glide record object
Script will read from the short description of the security case and copy it over as title to major security incident.
Figure 1. Image 1: Can Promote to MSI Figure 2. Image 2. Modal View - Link and Unlink security case records to major
security incidents both from Major Security Incident Management workspace. Also,
Unlink record functionality is visible only for
the linked records.