When viewing the details page for an endpoint in our inventory, I noticed a button that says "Isolation Unavailable". When I hover over the button it displays the following message: "You do not have sufficient permissions to perform this action".
What permissions are required in order for me to isolate endpoints in Red Canary?
Ensure that the user has the Responder role enabled on their account.
According to Understand and assign roles, the Responder role grants users the ability to respond to threats by isolating endpoints and executing response actions on those systems via Red Canary. If this role is not present on a user's account, the ability to isolate an endpoint within Red Canary may not be available.