Map a Risk Exchange Business Rule to an Action

You can map business rules with actions so that when a user or host matches a business rule, the configured action will be performed on the user.

1. Go to Risk Exchange > Actions.
2. Click Add Action Configuration.
   
3. Select a Business Rule, and then a Configuration.
4. Based on the selected configuration, a list of Actions will be populated. Select an action that you want to map to the business rule.
5. If the action has required parameters, you must provide values for them. For each parameter, you can choose between two types:
   • Source: Allows you to dynamically use the value of a field from the matching record. This is useful when the action needs data from the record that triggered it. For example, you can use the email to populate the User Email field in a ticketing system.
   • Static: Allows you to provide a fixed, hardcoded value for the parameter. This is useful when the action requires a constant value that does not change based on the record that triggered it, such as a standard Groups for a specific severity level for alerts.
     
6. Enable Generate Alert if you would like to receive alerts in the Ticket Orchestrator module whenever an action is performed. Using this feature, users can receive alerts into your ITSM platform or receive notifications when an action is performed on users or hosts. Note that this feature requires that the Ticket Orchestrator module be enabled.
7. Enable Perform Action during Maintenance Window if you want the action to be executed only during a predefined maintenance window. If disabled, the action is performed instantly.
8. Enable Require Approval if you do not want the action to be performed automatically when a record matches the business rule. If enabled, when a record matches the business rule, an action log will be added to the Action Logs page that you will have to manually approve in order to perform the action.
9. Click Save.