Workflows

A workflow is an automated sequence of steps, built visually from a set of components, and triggered by a platform event or run automatically on a predefined schedule.

Workflows follow predefined steps and rules, so the same event is always handled in the same way. In Cyber Studio, workflows can also include AI agents that investigate a problem and fix it on your behalf. Alert automation is built this way: a workflow that Acronis manages uses the Agents to diagnose and fix supported alerts.

Workflows automate MSP operations, so that various predefined actions can be triggered when specific events occur in the Cyber Protect Cloud platform. This automation ensures a more efficient use of resources, while simultaneously reducing the risk of human error in step-by-step operations. MSP technicians can also complete their daily tasks more easily and faster, giving them more time to spend on non-standard issues.

Use workflows to:

  • Reduce alert noise by gaining greater control over how alerts are triggered and delivered, while filtering out unnecessary notifications, and focusing on those of higher priority.

    For example, if you have a URL that is blocked for employee access via URL filtering, you can define a workflow to handle any alerts generated when employees access the specified URL.

  • Automate standard procedures by triggering from a platform event or running automatically on a predefined schedule.

    Typical examples of usage are automated response actions for Endpoint Detection and Response (EDR) incidents, patch management automation, or support ticket processing in Automating tickets with workflows.

Some workflow functionality is not yet available in Cyber Console. Where this is the case, a Limited functionality message is shown, with a Go to current console link that opens the same functionality in the Protection console. You do not need to sign in again.

Workflow lifecycle

A typical workflow lifecycle looks like this:

Partner and customer tenant users with the role of Cyber Protection administrator or Cyber Protection Cyber administrator can create new workflows, and view and update any workflows in the system. These users can also view execution history, and assign workflows to the relevant users.

For propagated workflows or workflows set as templates, Cyber Protection administrators and Cyber Protection Cyber administrators can enable or disable workflow versions for selected tenants and child tenants, access workflow details in read-only mode, and clone workflows, but not workflow versions.

All other user roles have read-only access to the workflows assigned to them.

​​