Incident Snapshot showing NOT Authorized

Products

• Data Loss Prevention Enforce

Issue/Introduction

When you view an incident in the DLP Enforce console UI they are showing  "Not Authorized" after conducting a Discover scan against a server or network share.

Resolution

 

The User Roles for this account are not set correctly.  To modify, follow the instructions below:

 

1. Log into the DLP console using the Administrator account
2. Click on System, then Roles, from the main menu
3. Ensure the correct attributes are ticked under display attributes shared.
4. Add the role you have created to the user account you will be using.
5. Log out and back in under the modified user account.  Proceed to an incident to ensure you are now able to see the file locations and information.

*Note DLP 15.8 added a new 'attachment' privilege that is required to see attachment file names from the overview screen.