Isolation Unavailable

Issue

When viewing the details page for an endpoint in our inventory, I noticed a button that says "Isolation Unavailable". When I hover over the button it displays the following message: "You do not have sufficient permissions to perform this action".

What permissions are required in order for me to isolate endpoints in Red Canary?

Environment

Red Canary

Resolution

Ensure that the user has the Responder role enabled on their account.

Cause

According to Understand and assign roles, the Responder role grants users the ability to respond to threats by isolating endpoints and executing response actions on those systems via Red Canary. If this role is not present on a user's account, the ability to isolate an endpoint within Red Canary may not be available.