> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Risk Acceptance

> Learn how to accept findings as known risks in BloodHound Enterprise, and understand the difference between acceptance and remediation.

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=b682a26b342bde12302ec829e265bdb6" alt="Applies to BloodHound Enterprise only" width="225" height="45" data-path="assets/enterprise-edition-pill-tag.svg" />

The **Attack Paths** page in BloodHound Enterprise surfaces <Tooltip tip="A specific subsection of an Attack Path that BloodHound Enterprise has identified as a high-value remediation point." cta="Learn more" href="/analyze-data/findings/attack-paths#findings">findings</Tooltip>. Each finding includes prioritization data such as exposure and impact metrics to help you focus remediation efforts where they matter most.

Not every finding requires immediate remediation. Risk acceptance lets you acknowledge a finding as a known risk that your organization has reviewed and chosen to retain for a certain amount of time.

Use **acceptance** when:

* You have reviewed the risk and agreed to tolerate it for a defined period.
* You are waiting for a change to complete, such as a retention window.

<Note>
  Accepting a finding records that the risk is known and temporarily tolerated. Acceptance is not a fix. To reduce risk, you must remediate the underlying condition.
</Note>

Use **remediation** when:

* You are ready to remove the risky condition.
* You want posture trends to reflect actual risk reduction.

## Accept a finding

Before accepting a finding, you must sign in to BloodHound Enterprise with a [role](/manage-bloodhound/auth/users-and-roles#user-role-definitions) that can accept attack path impacted principals.

When you accept a finding principal:

* It is still included in posture calculations.
* It is hidden from the default principal table view for that finding.
* The principal and related edges still appear in other analysis views, including **Explore** and **Posture**.

<Steps>
  <Step title="Open the Attack Paths page">
    In the left navigation menu, click **Attack Paths**.
  </Step>

  <Step title="Locate the finding">
    Expand the finding, open the menu to the left of the principal name (three vertical dots) and click **Accept**.

    <Frame>
      <img src="https://mintcdn.com/specterops/oaqTTRoKDVQ7JntM/assets/image1-19.png?fit=max&auto=format&n=oaqTTRoKDVQ7JntM&q=85&s=fc622bd14b227b829fdd31af121f08de" alt="A view of an expanded finding that shows the accept option" width="490" height="612" data-path="assets/image1-19.png" />
    </Frame>
  </Step>

  <Step title="Set acceptance duration">
    In the **Accept Attack Path** window, set the number of days for acceptance and click **Accept**.

    <Tip>
      If you are accepting a finding while you wait for [data retention](/collect-data/enterprise-collection/data-retention#data-retention) settings to delete the associated data, set the duration based on that scenario. For example, for **Logons from Tier Zero Users**, set the duration to 7 days.
    </Tip>

    <Frame>
      <img src="https://mintcdn.com/specterops/t-Kb-qOfqpgsWjX4/assets/image1-20.png?fit=max&auto=format&n=t-Kb-qOfqpgsWjX4&q=85&s=cce2db1517f6b77530738ebbb8b5cacb" alt="A view of the accept attack path window that shows the duration setting" width="599" height="303" data-path="assets/image1-20.png" />
    </Frame>
  </Step>
</Steps>

## Remove acceptance

To remove acceptance for a principal:

<Steps>
  <Step title="Open the Attack Paths page">
    In the left navigation menu, click **Attack Paths**.
  </Step>

  <Step title="Locate the accepted principal">
    Expand the finding and enable the **Accepted** toggle.

    <Frame>
      <img src="https://mintcdn.com/specterops/t-Kb-qOfqpgsWjX4/assets/image1-21.png?fit=max&auto=format&n=t-Kb-qOfqpgsWjX4&q=85&s=e0da52cb5634a5fdc874fce777e71ccc" alt="A view of the attack paths page that shows the accepted toggle" width="375" height="135" data-path="assets/image1-21.png" />
    </Frame>
  </Step>

  <Step title="Remove acceptance">
    Open the menu to the left of the accepted principal (three vertical dots), and click **Remove Acceptance**.

    <Frame>
      <img src="https://mintcdn.com/specterops/t-Kb-qOfqpgsWjX4/assets/image1-22.png?fit=max&auto=format&n=t-Kb-qOfqpgsWjX4&q=85&s=866d26ade30367836f471c8d00e9329a" alt="A view of the menu that appears when clicking the three vertical dots next to an accepted principal" width="421" height="296" data-path="assets/image1-22.png" />
    </Frame>
  </Step>

  <Step title="Confirm removal">
    In the **Remove Attack Path Acceptance** window, select **Remove Acceptance**.

    <Frame>
      <img src="https://mintcdn.com/specterops/t-Kb-qOfqpgsWjX4/assets/image1-23.png?fit=max&auto=format&n=t-Kb-qOfqpgsWjX4&q=85&s=81e4950156bf08bac13437778fdb7006" alt="A view of the remove attack path acceptance window" width="603" height="173" data-path="assets/image1-23.png" />
    </Frame>
  </Step>
</Steps>

## Outcome

After acceptance, the principal is hidden from the default principal table for that finding until you enable the **Accepted** toggle. The principal and related edges remain visible in the **Explore** and **Posture** pages.

<Frame>
  <img src="https://mintcdn.com/specterops/t-Kb-qOfqpgsWjX4/assets/image1-21.png?fit=max&auto=format&n=t-Kb-qOfqpgsWjX4&q=85&s=e0da52cb5634a5fdc874fce777e71ccc" alt="A view of a finding that shows the accepted toggle" width="375" height="135" data-path="assets/image1-21.png" />
</Frame>
