Revoking scoped investigations

As an approver, you can revoke an investigator's access to a scoped investigation prior to expiry, if access is no longer needed.

You can revoke access to any investigation; not just those you assign or approve.

How to revoke a scoped investigation

1. In the FortiDLP Console, on the left-hand sidebar, click .
2. Under General, select the Scoped investigations tab.
3. In the All scoped investigations table, click the investigation's table row.
4. At the bottom of the dialog box, click Revoke.
   
5. In the Revoke investigation dialog box, do the following:
   1. In the Comments field, type a reason for revoking investigation access.
   2. Click Revoke.