Skip to main content
PATCH
Update automation settings for ungrouped users or endpoints without changing team-level switches

Authorizations

Authorization
string
header
required

Team API key sent as a Bearer token. Create a key in Wirespeed under Settings → Team. See https://docs.wirespeed.co/api-reference/authentication.

Path Parameters

entityType
enum<string>
required
Available options:
user,
endpoint

Body

application/json
chatOpsEnabled
boolean

Whether chat ops is enabled for ungrouped users

containmentEnabled
boolean

Whether containment is enabled for ungrouped assets

sourceSystemUpdates
boolean

When false, outbound updates to the source security product are skipped for detections linked to ungrouped assets

alwaysNotify
boolean

When true, detections involving ungrouped assets are always escalated for notification, even when the verdict rule would resolve or only run chat ops

Response

entityType
enum<string>
required
Available options:
user,
endpoint
chatOpsEnabled
boolean
required
containmentEnabled
boolean
required
sourceSystemUpdates
boolean
required
alwaysNotify
boolean
required