Share cases
Latest Dynatrace
Please be aware that the sharing cases functionality might not work with cases created before 15.07.2024.
If you own a case, you can share it with other users in your Dynatrace environment.
In the following, you will learn
Sharing options
-
Share access: You can give access to specific users or groups to view or edit your case.
- Open the case that you want to share.
- Select
Share to open the Share case window. - In the Share access section, specify the people and groups with whom you want to share the case, and select the permission level they should have.
- Select Share case.
-
Share link: You can create a link allowing anyone you share it with to view or edit your case.
- Open the case that you want to share.
- Select Share to open the Share case window.
- In the Share link section, select a permission level and then select Create link. This creates a URL you can distribute in your investigation channel or include in your report for any link holder.
Be aware that distributed links can be forwarded to others and accessible with the same permissions as when they were created.
You can use a combination of both sharing options for the same case. For example, you might want to maintain a list of people who need regular access to the case (collaboration and joint editing), and you might also want to occasionally send out an access link to a wider audience (people who only need to view the case).
Permissions
Regardless of how you share your case, you need to specify the permission level of your sharing:
- Read-only: With the Can view option, people can view the case but can't edit anything. For example, they can't run queries, edit nodes, change timeframes, or add or delete elements in your evidence collection.
- Read and write: With the Can edit option, people can do anything the case owner can do except share or delete the case.
View access
There are several ways to view the sharing state and permission level of a case:
-
On the home page of Security Investigator, in the lower-right corner of a case, there's a specific symbol for each state; hover over it for details.
-
When expanding the Recent cases panel on the left-hand side of a case, the shared case symbol is displayed next to a case name; hover over it for details.
-
Within a case, next to the title name:
- When the Share option is displayed, it means you own the case. To see and manage who you're sharing it with, see Manage access.
- When the Share option isn't displayed, the case is shared with you in edit mode.
- When
Read-only is displayed, the case is shared with you in read-only mode.
- When the
To provide integrity, multiple people are not allowed to edit a case at the same time. When someone is editing a case, it's locked into read-only mode for everyone with edit rights (including the case owner). It's released again when the case is closed by the person who locked it or after 10 minutes of inactivity.
Note that even when a case is locked in read-only mode, the case owner can still access and use the Share option.
Manage access
The share option provides you with a control panel where you can manage all access to your case.
-
Open the case that you want to manage.
-
Select
Share.If you don't see a
Share option at the top of the case, you don't own the case, so you can't access the share settings. -
Select Manage access
, and then select any option you want.
In the Manage access section, you can
- View a list of people or groups with access to your case and their permission level
- Edit or remove permissions
- View, copy, or remove links that you created with edit or view permissions
- View how many times your links have been accessed
- Remove all shared permissions for your case
Further resources
For additional insights into case sharing, see Collaborate with peers in hunting security threats.