Approving Policy Recommendations (SOAR Action in ServiceNow)

You can use this SOAR action to approve recommendations related to the policy that is associated with the alert.

• This SOAR action can be run from an alert, and can be performed on one recommendation at a time.
• The Approve Policy Recommendations action is available in the related actions in the related list of alerts.
• After the successful execution of the action:
  • The state of the recommendation changes from NEW to ACCEPT.
  • The recommendation will be in the reviewed state in the Carbon Black Cloud portal.
• After the recommendation is approved the recommendation record in the Alert Recommendation record is removed.