Link an Organization#
By default, organizations in TheHive aren't linked. Each organization operates independently and can't access others on the instance.
To allow case sharing with their related tasks and observables, link an organization to another and configure the corresponding global sharing rules at the organization level.
To learn more about how sharing rules function and interact, refer to About Organizations Sharing Rules.
Procedure
-
Go to the Organizations view
-
Select the organization to link to another, then select Linked organizations. Alternatively, hover over the organization and select .
-
Select Manage linked organizations.
-
Select the organizations you want to link to your organization.
-
Choose the case-sharing rules between the organizations in both directions using the Choose a link type dropdown lists.
Options are the followings:
- default: Cases aren't automatically shared with the other organization. Users must share them manually.
- supervised: Cases are automatically shared with the other organization with an analyst-type permission profile, which grants both read and write access to cases.
- notify: Cases are automatically shared with the other organization with a read-only permission profile.
-
Select Confirm.