Predefined User Roles for Cortex Xpanse - Cortex Gateway Admin Guide - Cortex - Cortex - Security Operations

Cortex Gateway Administrator Guide

Product
Cortex
Creation date
2023-03-23
Last date published
2024-04-15
Category
Cortex Gateway Admin Guide
Abstract

Use predefined roles to easily assign user access to Cortex Xpanse views and actions.

Cortex Xpanse provides a set of predefined user roles that you can use to assign View and Edit permission to Cortex Xpanse users. Each predefined role extends a specific set of privileges to users. The permissions defined in the predefined roles cannot be changed, but you can save a predefined role as a new role and edit it as needed.

The following tables describe the permissions defined for each of the predefined roles.

The following table shows the permissions for the predefined role Account Admin.

Section

Component

Permissions

None

View

View/Edit

Dashboards & Reports

Dashboards

-

-

checkmark-n.png

Reports

-

-

checkmark-n.png

Incident Response

Alerts & Incidents

-

-

checkmark-n.png

Query Center

-

-

checkmark-n.png

Personal Query Library

-

-

checkmark-n.png

Playbooks

-

-

checkmark-n.png

Remediation Path Rules

-

-

checkmark-n.png

Attack Surface Rules

-

-

checkmark-n.png

Assets

Network Configuration

-

-

checkmark-n.png

Asset Inventory

-

-

checkmark-n.png

Business Unit Overrides

-

-

checkmark-n.png

Websites

-

checkmark-n.png

-

Marketplace

Browse

-

-

checkmark-n.png

Configurations

Auditing

-

checkmark-n.png

-

General Configuration

-

--

checkmark-n.png

Alert Notifications

-

-

checkmark-n.png

Integrations

-

-

checkmark-n.png

Public API

-

-

checkmark-n.png

The following table shows the permissions for the predefined role Instance Admin.

Section

Component

Permissions

None

View

View/Edit

Dashboards & Reports

Dashboards

-

-

checkmark-n.png

Reports

-

-

checkmark-n.png

Incident Response

Incidents and Alerts

-

-

checkmark-n.png

Query Center

checkmark-n.png

-

-

Personal Query Library

checkmark-n.png

-

-

Playbooks

-

-

checkmark-n.png

Detection and Threat Intel

Attack Surface Rules

-

-

checkmark-n.png

Assets

Network Configuration

checkmark-n.png

-

-

Compliance

checkmark-n.png

-

-

Assets

Websites

-

checkmark-n.png

-

Asset Inventory

-

-

checkmark-n.png

Marketplace

Browse

-

-

checkmark-n.png

Settings

Auditing

-

checkmark-n.png

-

General Configuration

-

-

checkmark-n.png

Alert Notifications

-

-

checkmark-n.png

Integrations

-

-

checkmark-n.png

Public API

-

-

checkmark-n.png

The following table shows the permissions for the predefined role Analyst.

Section

Component

Permissions

None

View

View/Edit

Dashboards & Reports

Dashboards

-

-

checkmark-n.png

Reports

-

-

checkmark-n.png

Incident Response

Incidents and Alerts

-

-

checkmark-n.png

Query Center

-

-

checkmark-n.png

Personal Query Library

-

-

checkmark-n.png

Detection and Threat Intel

Attack Surface Rules

-

-

checkmark-n.png

Assets

Websites

-

checkmark-n.png

-

Asset Inventory

-

-

checkmark-n.png

Marketplace

Browse

-

-

checkmark-n.png

Settings

Auditing

checkmark-n.png

-

-

General Configuration

checkmark-n.png

-

-

Alert Notifications

checkmark-n.png

-

Integrations

-

-

checkmark-n.png

Public API

-

checkmark-n.png

-

The following table shows the permissions for the predefined role Security Engineer.

Section

Component

Permissions

None

View

View/Edit

Dashboards & Reports

Dashboards

-

-

checkmark-n.png

Reports

-

-

checkmark-n.png

Incident Response

Incidents and Alerts

-

-

checkmark-n.png

Query Center

-

-

checkmark-n.png

Personal Query Library

-

-

checkmark-n.png

Playbooks

-

-

checkmark-n.png

Detection and Threat Intel

Attack Surface Rules

-

-

checkmark-n.png

Assets

Websites

-

checkmark-n.png

-

Asset Inventory

-

checkmark-n.png

-

Marketplace

Browse

-

checkmark-n.png

Settings

Auditing

checkmark-n.png

-

-

General Configuration

-

checkmark-n.png

-

Alert Notifications

checkmark-n.png

-

-

Integrations

-

checkmark-n.png

-

Public API

-

checkmark-n.png

-

The following table shows the permissions for the predefined role Privileged IT Admin.

Section

Component

Permissions

None

View

View/Edit

Dashboards & Reports

Dashboards

checkmark-n.png

-

-

Reports

checkmark-n.png

-

-

Incident Response

Incidents and Alerts

checkmark-n.png

-

-

Query Center

checkmark-n.png

-

-

Personal Query Library

checkmark-n.png

-

-

Playbooks

-

-

checkmark-n.png

Detection and Threat Intel

Attack Surface Rules

checkmark-n.png

-

-

Assets

Websites

checkmark-n.png

-

-

Asset Inventory

checkmark-n.png

-

-

Marketplace

Browse

-

-

checkmark-n.png

Settings

Auditing

checkmark-n.png

-

-

General Configuration

-

-

checkmark-n.png

Alert Notifications

checkmark-n.png

-

-

Integrations

-

-

checkmark-n.png

Public API

-

-

checkmark-n.png

The following table shows the permissions for the predefined role Viewer.

Section

Component

Permissions

None

View

View/Edit

Dashboards & Reports

Dashboards

-

checkmark-n.png

-

Ingestion Monitoring

checkmark-n.png

-

-

Reports

-

-

checkmark-n.png

Incident Response

Incidents and Alerts

-

checkmark-n.png

-

Query Center

-

checkmark-n.png

-

Personal Query Library

-

checkmark-n.png

-

Playbooks

-

checkmark-n.png

-

Detection and Threat Intel

Attack Surface Rules

-

checkmark-n.png

-

Threat Intel

checkmark-n.png

-

-

Asset Inventory

-

checkmark-n.png

-

Marketplace

Browse

-

checkmark-n.png

-

Settings

Auditing

-

checkmark-n.png

-

General Configuration

-

checkmark-n.png

-

Alert Notifications

-

checkmark-n.png

-

Integrations

-

checkmark-n.png

-

Public API

-

checkmark-n.png

-