Skip to Content

How to display active users only for people lookup fields

Scope

FortiSOAR v7.0.1 and above.

Solution

In FortiSOAR v7.0.1 onward, new features are added for the People Lookup Field in the Module to display active users only for ease of searching and filtering when dealing with Incident Response.

By default, Incident Response will display all the users in the people lookup field such as the ‘Assigned to’ field in the Alerts Module.

By default, Incident Response will display all the users in the people lookup field such as the 'Assigned to' field in the Alerts Module.

In that case, it will be difficult for users with multiple accounts to filter the incident efficiently. Hence, the features below can remove inactive users from the selection.

Go to FortiSOAR GUI -> Setting -> Application Editor -> Modules > Alerts -> Field Editor -> Assigned to -> Filter Setting, enable ‘Only show active users’ -> Apply -> Save & Publish All Modules.

Go to FortiSOAR GUI -> Setting -> Application Editor -> Modules > Alerts -> Field Editor -> Assigned to -> Filter Setting, enable 'Only show active users' -> Apply -> Save & Publish All Modules.

Note: Any field with the LOOKUP field type will have these features and will be disabled by default. After that, Only active users will be visible in the ‘Assigned to’ filter:

Any field with the LOOKUP field type will have these features and will be disabled by default. After that, Only active users will be visible in the 'Assigned to' filter.