Enable these permission sets before you begin to execute the incident REST API calls.
Before you begin, enable REST APIs in ePO - On-prem. Go to Menu → Data Protection → DLP Settings → Advanced and select Enable REST API.
You need these specific permission sets to edit or view the incident details and evidence files queried using the REST API calls. To assign these permissions, go to Menu → User Management → Permission Sets and create a new permission set or edit an existing permission set for Incident Management, then select these permissions. By default, the permissions are enabled.
Evidence File Access
User can view evidence files
User can view match string files
Incidents Data Redaction
Incidents Custom Attributes
Users can view and edit custom attributes
REST API
User can view the contents of evidence files through REST API
User can view incident details through REST API
User can update the incident details through REST API
Executing the REST API calls
You can use different methods, such as cURL commands, HTTP client, Python, or Perl scripts to make the REST API calls. The document provides the sample API calls using HTTP client and cURL syntax.
Note
In a Windows Command prompt, when using the cURL commands, pass the URL and <user>:<password> in double quotes as it fails to recognize special characters and single quotes.