Auto-accepting responses in MDR Web Console

You can enable auto-acceptance of the offered responses. In this case, the actions offered within responses, for example, deleting an infected file, will be performed automatically. When this feature is disabled, the measures offered within responses need to be accepted or rejected manually.

If you use tenants, you can enable the auto-acceptance of responses for all tenants or only for the tenants that you select. If you do not use tenants, you enable or disable this feature for your current organization.

To enable auto-acceptance of responses:

1. In the MDR Web Console window, navigate to the Settings menu item.
2. Click the Incidents tab.
3. Select one of the following options:
   • Enabled for all tenants

     When this option is selected, the auto-acceptance of responses is enabled both for the existing and newly created tenants.

   • Enabled for the tenants selected below

     Select the tenants for which you want to enable the auto-acceptance of responses. For newly created tenants, the auto-acceptance of responses is disabled by default.

4. Click the Save button.

Auto-acceptance of responses is enabled and the actions offered within responses will be performed automatically for all tenants or the tenants that you selected. You can disable this option at any time.

Access rights to view or change the auto-acceptance settings

The user roles of Kaspersky Managed Detection and Response have the following access rights to the auto-acceptance settings: