Reassign an incident to a user (by email)

PATCH 
/v2/incidents/:id/assignee

Dedicated assignee route for SOAR playbooks. Set assignee_email: null to unassign. The target user must be an active member of the incident's org.

Request

Responses

200

Assignee updated (or unassigned).

400

Validation failure. See error.code (VALIDATION_ERROR, INVALID_STATUS_TRANSITION, COMMENT_REQUIRED, USER_NOT_FOUND, INVALID_DISPLAY_ID, BULK_ACTION_FIELD_MISMATCH, BULK_LIMIT_EXCEEDED).

401

UNAUTHORIZED: missing or invalid bearer token, or wrong token type for a write route.

403

Access denied. Possible codes are ACCESS_DENIED, TWO_WAY_DISABLED, MODULE_ACCESS_DENIED, INCIDENT_ARCHIVED, org/user inactive, or integration configuration inactive.

404

Target entity (or job) not found in the token's org tree.

429

RATE_LIMIT_EXCEEDED: the per-token budget is exhausted. Back off per the Retry-After header.

Response Headers

Retry-After

Seconds to wait before retrying.

503

INTEGRATION_PLATFORM_UNAVAILABLE or INTEGRATION_AUTH_UNAVAILABLE: transient upstream failure, safe to retry.