Issue
When a Playbook is executed the action to isolate the target endpoint will end in failure with an unexpected error.
Environment
Red Canary Automation
VMware Carbon Black Cloud
Resolution
As a user with global admin permissions, verify that the Red Canary API has the correct permissions to Quarantine.
redcanary.cbcef
Cause
Without the correct permissions the API will failed to quarantine/Isolate the endpoint.