Skip to main content
PUT
/
api
/
v2
/
workspaces
/
{workspaceId}
/
incidents
/
{source}
/
{incidentId}
/
assignee
Assign incident
curl --request PUT \
  --url https://api.example.com/api/v2/workspaces/{workspaceId}/incidents/{source}/{incidentId}/assignee \
  --header 'Content-Type: application/json' \
  --data '
{
  "userId": "<string>",
  "email": "<string>"
}
'
{
  "type": "<string>",
  "title": "<string>",
  "status": 123,
  "detail": "<string>",
  "instance": "<string>",
  "code": "<string>",
  "requestId": "<string>",
  "timestamp": "<string>",
  "target": "<string>",
  "errors": {}
}

Path Parameters

​
workspaceId
string<uuid>
required
​
source
enum<string>
required
Available options:
Sentinel,
DefenderXDR,
QRadar,
Splunk,
CrowdStrike,
SentinelOne
​
incidentId
string
required

Body

application/json

v2 request body for assigning an incident to a user.

​
userId
null | string

ContraForce user id of the assignee.

​
email
null | string

Email of the assignee, used when string AssignIncidentRequest.UserId is not known to the caller.

Response

No Content