Dear Community Folks,

We have a requirement in SecOps SIR module as below

The Requirement is focused on the Knowledge article in SecOps Module in Security Incident Knowledge base where we have below conditions

1. Only the user with knowledge_admin and sn_si.analyst should be able to create the knowledge article under the knowledge base Security Incident
2. And once the Knowledge article is created there should be an approval triggered for the knowledge article that can only be approved by user with role knowledge_admin and post which the KA has to be published
3. Post the knowledge article is published the KA has to be viewed by any user who has SN_basic rule

No customization script can be allowed as we need go with only configuration  and OOB components.

User Criteria under knowledge articles was used to achieve the points 1 and 3.

But with the Point 2 we see that when the Knowledge article is created by SN_analyst there is no approval triggered and Sn_analyst itself can approve/Publish the Knowledge article which should not occur.

I need your help in triggering the approval for the knowledge article and restricting the sn_si analyst to self-publish the knowledge article.

Thank you for going through the article.

Regards

Satya