Configure Default Auto-Responses
When you set a response at the detection level, any issue created by this detection will follow the same workflow unless you change the response at the issue level. Default fixes can be set for many detections, but not all. Some responses must be manually set individually at the issue level, while other responses can only be set as default detection responses.
Set default responses
To configure a detection's default response, open the Detection detail view. Then add your response preferences.
The response workflow begins when the event or state is triggered. If you edit the default response in the detection, it applies to any issues going forward (but doesn't apply retroactively).
There are four standard response options you can choose from. You can use each response option once in your default workflow. Some detections have additional response issues based on their detection logic.
Email Notification
Send an email notification any time the detection creates a new issue. You can specify which email or group based on the file location: a user's or a shared drive. The email address must exist in Material.
A default custom message is located in the email notification option, but you can alter it as needed. Click the variables to insert personalized text (rendered in the email).
Grace Period
Use Grace Periods to give users time to self-remediate, or to allow you time to manually create a response or analyze. A response can open with a grace period, so the file owner gets a window to fix the sharing before any notification goes out. A grace period always needs an action after it, and you can't place two of them back to back.
Update Permissions
Tightening permissions on a file involved in an issue can be an effective remediation. Toggle the options on and choose your desired roles based on Google or Microsoft 365 parameters.
Update Labels
You can add or remove Google labels automatically as part of your fix workflow.
Last updated
Was this helpful?