Use email forwarding rules as the incident response workflow.

Run destructive response actions without scoping or approval.

Automatically close every high-severity incident to reduce queue size.

Configure playbooks, automation rules, and response actions that match incident severity, entity context, and approval requirements.