Instance Administrator - Learn more about the Cortex XSIAM predefined user role called Instance Administrator. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Documentation
Product
Cortex XSIAM
Creation date
2024-03-06
Last date published
2026-05-18
Category
Administrator Guide
Abstract

Learn more about the Cortex XSIAM predefined user role called Instance Administrator.

View and edit permissions for all components and access all pages in the Cortex XSIAM tenant. The Instance Administrator can also make other users an Instance Administrator for the tenant. If the tenant has predefined or custom roles, the Instance Administrator can assign those roles with scopes to other users.

Tip

Assign to instance-level administrators who need full control over a specific tenant, but should not automatically gain access to other instances in the account.

Common scenarios include multi-tenant deployments, MSSP environments, and delegated admins (for example, a team lead gets full admin on their team's instance without access to other teams' instances).

To quickly see exactly which pages and actions a role allows, click on the role name, which opens a read-only view of all checked permissions. For more information about the permissions, see Role permissions by components.