---
title: "Including False Positives Reported by API Users | ThreatConnect"
slug: "including-false-positives-reported-by-api-users"
description: "This article describes how Organization Administrators can enable false positive data provided by API users to be included in the Observations/False Positives card for Indicators."
tags: ["Enriching Data", "Administrator"]
updated: 2022-09-02T12:24:55Z
published: 2022-09-02T12:24:55Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://knowledge.threatconnect.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Including False Positives Reported by API Users

Organization Administrators can follow these steps to enable data provided by API users to be included in the **Observations/False Positives** card:

1. On the top navigation bar, hover the cursor over **Settings**![Icon  Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/including-false-positives-reported-by-api-users-image-dhjygvd8.png) and select **Org Settings**. The **Membership**tab of the **Organization Settings**screen will be displayed (Figure 1).

![Graphical user interface, text, application Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/including-false-positives-reported-by-api-users-image-vli8zue0.png)
2. Click **Edit** ![](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/including-false-positives-reported-by-api-users-image-uduabyo9.png) in the **Options**column for an API user. The **API User Administration**window will be displayed (Figure 2).

![Graphical user interface, text, application, email Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/including-false-positives-reported-by-api-users-image-p0qbv074.png)
3. Select the **Include in Observations and False Positives** checkbox, and click the **SAVE** button. The **Observations/False Positives** card will now display a list of how many times the selected API user made observations and reported false positives on the Indicator.

---

*ThreatConnect® is a registered trademark of ThreatConnect, Inc.*

20047-03 v.08.A