Deleting playbooks

Predefined playbooks cannot be deleted.

To delete a custom playbook, you must have one of the following roles: Main administrator, SOC administrator, Tier 1 analyst, Tier 2 analyst, Tenant administrator.

To delete a custom playbook:

  1. In the main menu, go to Monitoring & reportingPlaybooks.
  2. Select the playbook from the list, and then click the Delete button.
  3. In the confirmation dialog box, click Delete.

    The playbook cannot be deleted if there are launched playbook instances. In this case, terminate all launched instances before deleting the playbook.

If you deleted a playbook in the Active or Unavailable status, the playbook is displayed in the playbooks table with the Deleted status and is only available for viewing and copying.

Playbooks in the Deleted status are deleted permanently.

Page top