To grant artifact permissions to the Automation User, perform the following procedure.

Procedure

  1. Open the Splunk SOAR console.
  2. In the left navigation bar, click Administration > User Management > Roles & Permissions.
  3. Click Add New Role.
  4. Click Basic Permissions.
  5. Select the Delete checkbox for Events.
    Create artifact permissions
  6. Click Add Users.
  7. Select Automation user and click Add.
  8. Fill in the Role Name and Role Description fields. Click Create Role.

What to do next

Create and Activate a Normalize Artifact Playbook