Skip to main content
Solved

Case wall permissions -locking down case downloads

  • June 8, 2026
  • 1 reply
  • 17 views

donkos
Forum|alt.badge.img+9

We have a SOAR Graph mail connector to a mailbox where users submit suspicious emails. Each connector ingestion adds any potentially malicious attachments to the case wall.

Is there any way to adjust the permissions so that someone could see the playbook results, the case views etc, post to the case wall but not download a file auto attached to the case wall?

Best answer by cmorris

Not at this time. If you need the analysts to be able to see the Case Wall, but not download the attachments, I would look at writing the attachments to something like a Cloud Storage Bucket and controlling the access there in place of the Case Wall.

1 reply

cmorris
Staff
Forum|alt.badge.img+13
  • Staff
  • Answer
  • June 9, 2026

Not at this time. If you need the analysts to be able to see the Case Wall, but not download the attachments, I would look at writing the attachments to something like a Cloud Storage Bucket and controlling the access there in place of the Case Wall.