>
    Strata Copilot
    Assign Incidents to Another Administrator
    Focus
    Download PDF
    Focus
    1. Home
    2. SaaS Security
    3. Data Security Administration
    4. Remediate Risks of Sanctioned SaaS Apps
    5. Manually Remediate Incidents
    6. Assign Incidents to Another Administrator
    Download PDF
    SaaS Security

    Assign Incidents to Another Administrator

    Table of Contents

    Assign Incidents to Another Administrator

    Use Bulk Incident to assign a group of incidents to another Data Security administrator or assign incidents individually.
    Where Can I Use This?What Do I Need?
    • Strata Cloud Manager
    • Data Security license
    Or any of the following licenses that include the Data Security license:
    • CASB-X
    • CASB-PA
    Sometimes you don’t have the proper context around the content or the collaborators to properly assess incidents. In these cases, you can assign a single incident or group of incidents to another administrator (a compliance officer, for example) who is more familiar with the content and its proper use.
    Additionally, you can add notes to the asset to provide the administrator additional instructions. Similarly, the administrator to which you assign the incident can add notes to the asset to communicate assessment details and reason for incident status change.
    You must log in to Strata Cloud Manager as an administrator with a Super Admin, Admin, or Limited Admin role to assign incidents to another administrator.
    • To assign a group of incidents, select ConfigurationSaaS SecurityData SecurityIncidents.
      1. Choose the incidents to assign to another administrator.
      2. Use the descending and ascending columns and predefined filters to narrow the list of results, if the list of incidents is too large.
      3. Select up to 1000 incidents individually, in groups, or all at once to assign to another administrator.
      4. Select ActionsAssign to and choose an administrator.
      5. Verify the new assignments for each incident or select the administrator in the Assigned To search filter.
    • To assign a single incident, select ConfigurationSaaS SecurityData SecurityIncidents.
      1. Click the Data Asset Name to open its details page.
      2. (Optional) In the Incidents pane, select Review NotesAdd Note to add additional details for the administrator before you assign the incident.
        • Provide context about your concerns related to the asset.
        • Give instructions or supplemental information about the asset.
        • Document interactions you’ve had with the asset owner.
      3. Click Unassigned and select an administrator.
      4. (Optional) Select an incident Status.
        By default, the category is New. If necessary, create new categories to reflect your organization’s incident management process.
      5. Verify the new administrator assignment for the incident.

    © 2026 Palo Alto Networks, Inc. All rights reserved.