Skip to main content
Question

How to Prevent Executing an Action Without Filling Required Parameters ?

  • January 19, 2026
  • 4 replies
  • 96 views

yuuyake
Forum|alt.badge.img+1

Analysts are executing an action that I put on a Playbook which requires manual selection from a dropdown list.

Main problem is they are sometimes doing it without choosing an option.
So I have to prevent this happening, I cant simply blame random analysts.

We have only 2 options when i create a manual action from dropdown list. 

  1. You make that required parameter as MANDATORY.
    Then you have to give a DEFAULT VALUE when you are implementing it.
    If you give default value then when it is live, its showing that, action in playbook already filled with your default parameter, just like below image, and you can just press EXECUTE button as an analysts without choosing it.
    Which we dont want.
  2. You make that required parameter as NON-MANDATORY
    Then when its live playbook will gonna show you a dropdown list, that has “Choose” placeholder on top of it by default.(no real picture but it is just like at “Assign to” option below) Bc the parameter is NOT MANDATORY, then it means it is executable without choosing.
    Which we dont want :D

So can someone please help what is the solution here ? This is kinda design error, style of this design is conflicting with itselft and allowing human errors. It makes no sense to me that there is no way we can not really force a manual action and make them choose.

 

4 replies

kentphelps
Community Manager
Forum|alt.badge.img+12
  • Community Manager
  • February 17, 2026

Gemini gave me some logic you might could use here:

  1. Add a third option to your dropdown list called --- PLEASE SELECT AN OPTION ---.

  2. Set this as the Default Value.

  3. Use a Condition Step  to check if the selection equals that specific string.

  4. If it does, the playbook loops back to the manual task until they pick one of your two "real" options.


yuuyake
Forum|alt.badge.img+1
  • Author
  • New Member
  • February 25, 2026

Gemini gave me some logic you might could use here:

  1. Add a third option to your dropdown list called --- PLEASE SELECT AN OPTION ---.

  2. Set this as the Default Value.

  3. Use a Condition Step  to check if the selection equals that specific string.

  4. If it does, the playbook loops back to the manual task until they pick one of your two "real" options.

Thanks for reply but its not appliable, since there is no infinite loop, no loop breaking box.


Chris-N
Forum|alt.badge.img
  • New Member
  • June 15, 2026

Did you ever find a solution for this? This is the closest thread I can find which describes similar problems to ours. 

Analysts can seemingly close a case at any point without having completed necessary actions. Although this is a training issue of sorts, Secops doesn’t make it easy to enforce a field completion before closure. 

We previously had IBM SOAR/Resilient to tackle this sort of thing with a simple condition which would prompt the user to complete fields before allowing closure of a case.

 

Thanks


yuuyake
Forum|alt.badge.img+1
  • Author
  • New Member
  • June 15, 2026

Hello Chris,

Sadly no, when I'm working on this I found many things possible but not this :)
For example by playing with network packages : 

  • you can create empty playbooks
  • you can create a action box in IDE which has mandatory fields marked while you are implementing, and asked for you to fulfill in IDE but you can bypass filling mandatory fields so that it has to pass to Analysts (but no its still choosing a default first option)
  • you can create a action box in playbook without filling any field and save it, which is normally shows as red and doesn't allow you to save playbook(but no it still chooses the first available option in Live

So basically, you as a developer, have to fill these fields, definitely, cant run away, but analysts can :D They can just hit execute button without any worry.