SOAR - Playbooks fail to start with error "playbook cannot be run on ''"

Applicability

Description

SOAR Playbooks fail to start with error playbook cannot be run on '<LABEL>' even if the user has Administrator level permissions.

Investigation

The Administrator role does not grant label permissions, it just doesn't interfere with access.  If another role with Label restrictions is applied to a user, the reduced access restrictions will apply.

Resolution

The solution is to create an additional role where label permissions are explicitly applied.

1. In the SOAR UI, navigate to Administration > User Management > Roles & Permissions.
2. Create a new Role by clicking the +Role icon.
3. Under Label Permissions, choose the Select All option.
4. Add the desired users to the new Role and save.
5. If users authenticate with Single Sign-on and Roles are auto mapped to their account, the SSO role mapping will need to be configured with the new Role.