Skip to main content
The common use is a ticket Field Effect’s PSA integration opened for an ARO: the agent finds the ARO, adds its details and mitigation steps to the ticket with the endpoint’s risk and antivirus status, and, when the work is done, comments on the ARO and resolves it in Field Effect.
Automatically enabled when you configure Field Effect permissions in your agent workflow.

​
What It Does

  • Find the ARO behind a ticket, from the ARO link in the ticket or by organization, time and title
  • Read an ARO’s type, severity, details, mitigation steps and comments, and list AROs by organization, resolution and time
  • Add a comment to an ARO
  • Set an ARO to Resolved, Unresolved or Help Requested; Help Requested asks Field Effect’s analysts to act, for example to isolate an endpoint
  • Set an ARO to Dismissed, in its own permission group
  • Read endpoint devices with risk level and antivirus status, and the active response actions Field Effect took
  • Read client organizations, their contacts and escalation contact lists

​
Permission Groups

​
Access Profiles

​
Safety Controls